The Federal Government has directed all Ministries, Departments and Agencies (MDAs) to fully comply with the Nigeria Data Protection Act (NDP Act) 2023 as part of efforts to strengthen data governance and improve confidence in government digital services.
The directive was conveyed in Circular No. 59805/S.I/74 dated July 27, 2026, signed by the Secretary to the Government of the Federation, Senator George Akume.
The circular reflects President Bola Tinubu’s growing emphasis on the strategic importance of data in Nigeria’s economy. The President stated that “data is the new oil” and stressed that its value increases when it is properly managed, refined and responsibly shared.
He directed all ministries, extra-ministerial departments and agencies to collect information rigorously while ensuring that personal data is protected in line with the provisions of the NDP Act.
Under the new directive, every MDA is required to appoint a qualified Data Protection Officer (DPO) to oversee privacy and data protection compliance within the organisation.
The officers must be registered with the Nigeria Data Protection Commission (NDPC), while agencies may also engage licensed Data Protection Compliance Organisations (DPCOs) to support audits and other statutory obligations.
The circular further instructs MDAs to make adequate budgetary provisions for staff training, public awareness programmes, deployment of appropriate security technologies and regular compliance audits.
Government institutions are also expected to submit mandatory Data Protection Compliance Audit Returns within the timelines prescribed by law.
To underscore the seriousness of the directive, the Federal Government stated that Permanent Secretaries, Accounting Officers and Chief Executive Officers of MDAs will be personally accountable for ensuring compliance with both the circular and the NDP Act.
Reacting to the development, the National Commissioner and Chief Executive Officer of the Nigeria Data Protection Commission, Dr Vincent Olatunji, described the circular as a strong indication of the government’s commitment to protecting the privacy and fundamental freedoms of Nigerians.
He said responsible data governance is becoming increasingly important as Nigeria pursues its digital economy agenda and the administration’s broader development priorities.
According to Olatunji, the NDPC has established a regulatory clinic to provide technical guidance, answer compliance questions and support MDAs in achieving full compliance with the law.
The directive signals the Federal Government’s intention to treat personal data as a strategic national asset and to strengthen the protection of citizens’ information as digital public services, cloud computing and artificial intelligence continue to reshape governance and economic activity in Nigeria.
