Agencies directed to appoint data protection officers, conduct compliance audits and strengthen information security.
The Federal Government has directed all Ministries, Departments and Agencies (MDAs) to fully comply with the Nigeria Data Protection Act (NDP Act), 2023, as part of efforts to strengthen responsible data governance, protect citizens’ privacy and build public trust in government institutions.
The directive was announced on Tuesday in Abuja by the Head of Legal, Enforcement and Regulations at the Nigeria Data Protection Commission (NDPC), Babatunde Bamigboye, following a circular issued on July 27, 2026, by the Secretary to the Government of the Federation, Senator George Akume.
Bamigboye said the directive implements President Bola Tinubu’s instruction that government institutions should ensure the proper collection, processing and protection of personal data in accordance with the provisions of the NDP Act. He explained that the circular requires all MDAs to comply with the Act, its regulations, guidelines and directives issued by the NDPC on the processing of personal information.
He added that the government also directed MDAs to appoint qualified Data Protection Officers to oversee compliance, advise management on lawful data processing and submit the officers’ details to the NDPC for registration. According to him, agencies are also expected to engage licensed Data Protection Compliance Organisations where necessary, provide adequate funding for compliance activities, conduct awareness programmes, deploy appropriate technical safeguards and submit mandatory data protection compliance audit returns within the timelines prescribed by law.
Bamigboye noted that Permanent Secretaries, Accounting Officers and Chief Executive Officers of MDAs would be held personally responsible for ensuring compliance with both the government circular and the provisions of the Nigeria Data Protection Act.
He also disclosed that the National Commissioner of the NDPC, Dr Vincent Olatunji, commended the Tinubu administration for prioritising the protection of Nigerians’ privacy and fundamental freedoms. Olatunji said strong data accountability is essential to achieving the administration’s Eight Presidential Priorities and revealed that the commission has established a regulatory clinic to provide technical support to MDAs in meeting their compliance obligations.
According to the NDPC, the directive forms part of broader efforts to strengthen Nigeria’s data governance framework as the country positions itself for opportunities in the Fourth Industrial Revolution.