By 
The Federal Government has directed all Ministries, Departments and Agencies (MDAs) to reinforce their data protection and privacy practices as part of efforts to strengthen public confidence in digital governance and ensure the responsible management of citizens’ personal information.
The directive, contained in Circular No. 59805/S.I/74 dated July 27, 2026, mandates all federal institutions to fully comply with the Nigeria Data Protection Act (NDP Act) 2023, as well as all regulations and guidelines issued by the Nigeria Data Protection Commission (NDPC).
The circular was signed by the Secretary to the Government of the Federation (SGF), Senator George Akume, following a presidential directive from President Bola Ahmed Tinubu calling on government institutions to adopt stronger data governance and accountability measures.
“Data is the new oil: its value increases the more it is refined and responsibly shared,” President Tinubu stated in the directive referenced in the circular. “I therefore direct all Ministries, Extra-Ministerial Departments and Agencies to capture information rigorously and safeguard it under the Nigeria Data Protection Act, 2023.”
MDAs required to strengthen compliance frameworks
Under the new directive, all MDAs are expected to establish robust data protection frameworks that align with the requirements of the NDP Act and the country’s evolving regulatory compliance standards.
As part of the implementation measures, federal institutions must appoint qualified Data Protection Officers (DPOs) to oversee compliance management, advise organisational leadership on lawful data processing practices and serve as official liaison officers with the Nigeria Data Protection Commission.
The agencies are also required to submit details of their designated DPOs to the Commission, engage licensed Data Protection Compliance Organisations (DPCOs) where necessary, provide adequate funding for compliance activities and submit mandatory data protection audit reports within prescribed regulatory timelines.
The Federal Government further stated that Permanent Secretaries, Accounting Officers and Chief Executive Officers of MDAs will be held directly accountable for ensuring institutional compliance with the provisions of the NDP Act and the new government directive.
Strengthening trust in Nigeria’s digital economy
The latest directive comes as Nigeria continues to accelerate its digital transformation agenda, with public services increasingly being delivered through digital platforms that collect and process significant volumes of personal information.
The expansion of digital identity programmes, electronic government services, financial technology platforms and data-driven public initiatives has heightened the need for stronger data privacy safeguards, cybersecurity measures and responsible information governance.
Nigeria enacted the Nigeria Data Protection Act 2023 to establish a comprehensive regulatory framework for protecting personal data while strengthening oversight of how organisations collect, process, store and share personal information.
The legislation replaced the Nigeria Data Protection Regulation introduced in 2019 and expanded the statutory mandate of the Nigeria Data Protection Commission as the country’s primary data protection regulator.
NDPC pledges support for government institutions
Commenting on the directive, the National Commissioner and Chief Executive Officer of the Nigeria Data Protection Commission, Dr. Vincent Olatunji, described data accountability as a critical enabler of the Federal Government’s national development agenda.
He commended the administration’s commitment to protecting the privacy and fundamental rights of data subjects while reaffirming the Commission’s readiness to support public institutions in meeting their regulatory obligations.
According to Dr. Olatunji, the NDPC has established a regulatory clinic to provide technical guidance and compliance support to MDAs as they implement the new requirements.
“Data accountability is pivotal to achieving the eight Presidential Priorities,” he said, adding that the Commission would continue to provide regulatory guidance to institutions navigating evolving compliance obligations.
The Federal Government noted that the directive forms part of broader efforts to strengthen Nigeria’s digital economy by promoting effective data governance, regulatory compliance, privacy protection and responsible innovation.
The initiative is also expected to enhance public trust in digital government services while preparing public institutions to meet the governance, cybersecurity and data protection demands of the Fourth Industrial Revolution.
Comments