The Nigerian Government has directed all Ministries, Departments and Agencies (MDAs) to fully implement the provisions of the Nigeria Data Protection Act (NDP Act), 2023, as part of efforts to strengthen responsible data governance, protect citizens’ personal information and promote public trust in government institutions.
The directive is contained in Circular No. 59805/S.I/74 dated July 27, 2026, and signed by the Secretary to the Government of the Federation (SGF), Senator George Akume.
Senator Akume said the circular drew the attention of all Federal Government MDAs to President Bola Ahmed Tinubu’s directive on the strategic importance of data in national development and the need to ensure its lawful processing and protection.
According to the SGF, President Bola Ahmed Tinubu described data as “the new oil”, stressing that its value increases when it is refined and responsibly shared.
He said the President directed all ministries, extra-ministerial departments and agencies to capture information rigorously while safeguarding it in accordance with the Nigeria Data Protection Act, 2023.
READ ALSO: Nigerian Government Launches National Safe Schools Department
The circular mandates every MDA to ensure full compliance with the Act, relevant regulations, guidelines and directives issued by the Nigeria Data Protection Commission (NDPC) regarding the collection, storage, processing and management of personal data.
To achieve this objective, the Federal Government directed all MDAs to appoint suitably qualified Data Protection Officers (DPOs) to oversee institutional compliance with data protection obligations and provide guidance on lawful data processing.
The circular also requires MDAs to submit the names and contact details of their designated DPOs to the NDPC for registration and official records.
It further stated that institutions may engage licensed Data Protection Compliance Organisations (DPCOs), where necessary, to support compliance implementation and conduct statutory data protection audits.
In addition, the government directed all MDAs to make adequate budgetary provisions for data protection activities, including staff capacity building, awareness campaigns, deployment of technological safeguards, implementation of security measures and periodic compliance audits.
The circular also requires government institutions to submit mandatory Data Protection Compliance Audit Returns and other statutory reports to the NDPC within timelines prescribed by law.
To strengthen accountability, the Federal Government said Permanent Secretaries, Accounting Officers and Chief Executive Officers of MDAs would be personally responsible for ensuring compliance with the circular and the provisions of the Nigeria Data Protection Act.
Reacting to the directive, the National Commissioner and Chief Executive Officer of the Nigeria Data Protection Commission, Dr Vincent Olatunji, commended the administration of President Bola Ahmed Tinubu for demonstrating strong political and legal commitment to protecting the privacy and fundamental freedoms of data subjects across Nigeria.
Dr Olatunji described data accountability as critical to achieving the administration’s Eight Presidential Priorities, noting that effective data governance would improve public service delivery, enhance institutional transparency and strengthen citizens’ confidence in government.
He disclosed that the Commission has established a regulatory clinic to provide technical guidance and compliance support to Ministries, Departments and Agencies as they work towards meeting their statutory obligations under the NDP Act.
Dr Olatunji added that the initiative forms part of a broader package of regulatory measures aimed at positioning Nigeria to take advantage of opportunities associated with the Fourth Industrial Revolution while ensuring that personal data is processed responsibly, securely and in line with global best practices.
