The Federal Government has stepped up efforts to deepen data-driven governance and strengthen public confidence in the management of personal information by directing all Ministries, Departments and Agencies (MDAs) to fully comply with Nigeria’s data protection laws, with chief executives and accounting officers now personally accountable for implementation.
The directive is contained in Circular No. 59805/S.I/74, dated July 27, 2026, and signed by the Secretary to the Government of the Federation (SGF), Senator George Akume.
The circular draws the attention of all Federal MDAs to the directive of President Bola Ahmed Tinubu, underscoring the strategic importance of data in national development.
According to the President, “Data is the new oil: its value increases the more it is refined and responsibly shared. I therefore direct all Ministries, Extra-Ministerial Departments and Agencies to capture information rigorously and safeguard it under the Nigeria Data Protection Act, 2023 (NDP Act).”
The circular mandates that all MDAs ensure full compliance with the Nigeria Data Protection Act (NDP Act), relevant regulations, guidelines, and directives issued by the Nigeria Data Protection Commission (NDPC) regarding the processing of personal data.
To achieve this, MDAs are required to appoint suitably qualified Data Protection Officers (DPOs) to oversee compliance and provide strategic guidance on lawful data processing.
They must also register the names and contact details of their DPOs with the NDPC and engage licensed Data Protection Compliance Organisations (DPCOs), where necessary, to support statutory compliance audits and other regulatory obligations.
In addition, the Federal Government directed MDAs to make adequate budgetary provisions for data protection compliance activities, including staff training, public awareness initiatives, deployment of appropriate technical safeguards, and periodic compliance audits.
They are also required to submit all mandatory Data Protection Compliance Audit Returns and other statutory filings to the NDPC within the timelines prescribed by law.
Significantly, the circular places direct responsibility for compliance on Permanent Secretaries, Accounting Officers and Chief Executive Officers of all MDAs, making them personally accountable for ensuring adherence to both the circular and the provisions of the Nigeria Data Protection Act.
Reacting to the directive, the National Commissioner and Chief Executive Officer of the Nigeria Data Protection Commission, Dr. Vincent Olatunji, commended the administration of President Tinubu for demonstrating strong legal and political commitment to safeguarding the privacy and fundamental rights of data subjects in Nigeria.
Dr. Olatunji described data accountability as a critical enabler of the administration’s eight Presidential Priorities, noting that effective data governance is essential to building trust, improving public service delivery, and accelerating national development.
To support MDAs in meeting their compliance obligations, he disclosed that the Commission has established a regulatory clinic to provide technical guidance and facilitate seamless implementation of the requirements of the NDP Act.
According to the NDPC boss, the initiative is part of a broader package of regulatory interventions aimed at strengthening Nigeria’s data governance ecosystem as the country positions itself to harness the opportunities of the Fourth Industrial Revolution.