Nigerian Government Mandates MDAs To Implement Data Protection Act
All Ministries, Departments and Agencies (MDAs) have been directed by the Nigerian Government to fully implement the provisions of the Nigeria Data Protection Act (NDP Act), 2023, as part of efforts to strengthen responsible data governance, protect citizens’ personal information and promote public trust in government institutions.
The directive is in a Circular dated July 27, 2026 and signed by the Secretary to the Government of the Federation (SGF), Senator George Akume with reference No. Circular No. 59805/S.I/74.
Senator Akume said the circular drew the attention of all the Federal Government MDAs to the directive of President Bola Ahmed Tinubu on the strategic importance of data in national development and the need to ensure its lawful processing and protection.
The SGF said President Bola Ahmed Tinubu described data as “the new oil” and stressed that data’s value is enhanced when refined and responsibly shared.
“The President directed all ministries, extra-ministerial departments and agencies to collect information rigorously while protecting the information in line with the Nigeria Data Protection Act, 2023,” he said.
The circular requires all MDAs to ensure full compliance with the Act, relevant regulations, guidelines and directives issued by the Nigeria Data Protection Commission (NDPC) in respect of the collection, storage, processing and management of personal data.
To this end, the Federal Government directed all MDAs to appoint suitably qualified Data Protection Officers (DPOs) to oversee institutional compliance with data protection obligations and give guidance on lawful data processing.
The circular also mandates MDAs to provide the names and contact details of their designated DPOs to the NDPC for registration and official record keeping purposes.
It also stated that institutions may use licensed Data Protection Compliance Organisations (DPCOs) where necessary to assist with implementation of compliance and to carry out statutory data protection audits.
Read Also: Kwara Unveils New Initiative to Enhance Agricultural Productivity Through Training
Additionally, the government ordered all MDAs to make sufficient budgetary provisions for data protection activities, including capacity building of staff, awareness campaigns, deployment of technological safeguards, implementation of security measures, and regular compliance audits.
The circular also requires government institutions to submit mandatory Data Protection Compliance Audit Returns and other statutory reports to the NDPC within the timelines prescribed by law.
To ensure accountability, the Federal Government said the Permanent Secretaries, Accounting Officers and Chief Executive Officers of MDAs would be personally responsible for verifying compliance with the circular and the provisions of Nigeria Data Protection Act.
In response to the directive, the Nigeria Data Protection Commission’s National Commissioner and Chief Executive Officer, Dr Vincent Olatunji, commended the administration of President Bola Ahmed Tinubu for demonstrating strong political and legal resolve to defend the privacy and fundamental freedoms of data subjects all over Nigeria.
According to Dr Olatunji, data accountability was critical to achieving the administration’s Eight Presidential Priorities, adding that effective data governance would improve public service delivery, enhance institutional transparency and strengthen citizens’ confidence in government.
He said the Commission has also established a regulatory clinic to provide technical advice and assistance to the Ministries, Departments and Agencies in their bid to discharge their statutory responsibilities under the NDP Act.
Dr Olatunji said the initiative is part of a wider package of regulatory measures designed to put Nigeria in a position to take advantage of opportunities associated with the Fourth Industrial Revolution while ensuring that personal data is processed responsibly, securely and in line with global best practices.
