WorldStage– The Federal Government of Nigeria has directed all Ministries, Departments and Agencies (MDAs) to fully implement the Nigeria Data Protection Act (NDP Act), 2023, ordering them to strengthen data protection and responsible data governance as part of efforts to build public trust and safeguard citizens’ personal information.
The directive is contained in Compliance Circular No. 59805/S.I/74 dated July 27, 2026, and signed by the Secretary to the Government of the Federation (SGF), Senator George Akume.
According to the circular, the directive is in line with President Bola Ahmed Tinubu’s commitment to data-driven governance and the protection of personal information.
The circular quoted the President as saying: “Data is the new oil: its value increases the more it is refined and responsibly shared. I therefore direct all Ministries, Extra-Ministerial Departments and Agencies to capture information rigorously and safeguard it under the Nigeria Data Protection Act, 2023.”
The Federal Government instructed all MDAs to ensure full compliance with the provisions of the NDP Act, its regulations, guidelines and directives issued by the Nigeria Data Protection Commission (NDPC) governing the processing of personal data.
To achieve this, the government directed MDAs to appoint suitably qualified Data Protection Officers (DPOs) to oversee compliance and advise management on lawful data processing, while ensuring the names and contact details of the officers are submitted to the NDPC for registration.
The circular also requires MDAs to engage licensed Data Protection Compliance Organisations (DPCOs), where necessary, to facilitate compliance and conduct statutory audits.
In addition, agencies were directed to make adequate budgetary provisions for data protection activities, including staff capacity building, awareness campaigns, deployment of technical safeguards and periodic compliance audits, as well as submit mandatory Data Protection Compliance Audit Returns and other statutory reports to the NDPC within the timelines prescribed by law.
The government further stated that Permanent Secretaries, Accounting Officers and Chief Executive Officers of MDAs would be held personally responsible for ensuring compliance with both the circular and the provisions of the NDP Act.
Reacting to the directive, National Commissioner and Chief Executive Officer of the Nigeria Data Protection Commission, Dr. Vincent Olatunji, commended the Tinubu administration for demonstrating strong political and legal commitment to protecting the privacy and fundamental rights of Nigerians.
Olatunji said the Commission remains committed to supporting data-driven governance, stressing that accountability in data management is critical to achieving the administration’s eight Presidential Priorities.
He disclosed that the NDPC has established a regulatory clinic to provide technical support to MDAs in meeting their compliance obligations.
According to him, the initiative is part of a broader regulatory framework aimed at strengthening Nigeria’s data protection ecosystem as the country positions itself to harness opportunities presented by the Fourth Industrial Revolution.
