The Federal Government has directed all Ministries, Departments and Agencies (MDAs) to fully comply with the provisions of the Nigeria Data Protection Act (NDP Act) 2023 as part of efforts to strengthen responsible data governance and safeguard the personal information of Nigerians.
The directive is contained in Circular No. 59805/S.I/74, dated July 27, 2026, and signed by the Secretary to the Government of the Federation (SGF), Senator George Akume. The circular underscores the strategic importance of data governance in public administration and mandates federal institutions to strengthen compliance with the country’s data protection framework.
According to the circular, President Bola Tinubu described data as a critical national asset, stressing the need for government institutions to collect, manage and protect data responsibly.
“Data is the new oil: its value increases the more it is refined and responsibly shared. I therefore direct all Ministries, Extra-Ministerial Departments and Agencies to capture information rigorously and safeguard it under the Nigeria Data Protection Act, 2023,” the President was quoted as saying.
To ensure compliance, the Federal Government directed all MDAs to appoint qualified Data Protection Officers (DPOs) and notify the Nigeria Data Protection Commission (NDPC) of the appointments.
Agencies were also instructed to engage licensed Data Protection Compliance Organisations where necessary and make adequate budgetary provisions for compliance activities, including staff training, technical safeguards and periodic data protection audits.
The circular further requires all federal institutions to submit statutory Data Protection Compliance Audit Returns and other mandatory reports to the NDPC within the timelines stipulated by law.
It also places direct responsibility for compliance on Permanent Secretaries, Accounting Officers and Chief Executive Officers of federal agencies.
“Permanent Secretaries, Accounting Officers and Chief Executive Officers of all MDAs shall be personally responsible for ensuring institutional compliance with the Circular and the provisions of the NDP Act,” the circular stated.
Reacting to the directive, the National Commissioner and Chief Executive Officer of the Nigeria Data Protection Commission, Dr. Vincent Olatunji, described the move as a demonstration of the Tinubu administration’s commitment to protecting the privacy and fundamental rights of Nigerians while strengthening trust in public institutions.
Olatunji said effective data accountability is critical to achieving the administration’s eight Presidential Priorities, adding that the Commission had established a regulatory clinic to provide technical support and guidance to MDAs in meeting their obligations under the Data Protection Act.
According to the NDPC, the directive forms part of broader efforts to strengthen Nigeria’s data governance framework, promote responsible data management across government institutions and position the country to harness opportunities presented by the Fourth Industrial Revolution and the growing digital economy.
