The Nigeria Data Protection Commission has commenced an investigation into the alleged exposure of voter registration information belonging to Nollywood actor and politician, Emeka Ike.
The commission disclosed that it has already engaged both the Independent National Electoral Commission and Ike as part of efforts to determine the circumstances surrounding the incident.
Speaking during a media briefing in Abuja on Friday, the National Commissioner and Chief Executive Officer of the NDPC, Dr. Vincent Olatunji, described the matter as highly sensitive, especially as the country prepares for future elections.
“The issue involving INEC is particularly sensitive because it concerns the credibility of an electoral database. It is a matter we are treating with utmost urgency,” Olatunji said.
The controversy emerged after Lere Olayinka, Senior Special Assistant on Information to the Minister of the Federal Capital Territory, Nyesom Wike, shared details purportedly linked to Ike’s voter registration records on social media.
The post, which included screenshots allegedly obtained from an INEC administrative portal, contained information such as Ike’s application number, voter identification details, registration centre, photograph and date of registration transfer.
The disclosure sparked public concern over the security of personal information stored within the electoral commission’s database and raised questions about possible unauthorised access to voter records.
However, INEC denied reports of a cyberattack on its Continuous Voter Registration platform, maintaining that the incident stemmed from the misuse of legitimate internal credentials rather than an external breach.
Meanwhile, security operatives from the Force Intelligence Department–Intelligence Response Team have reportedly questioned Olayinka and an electoral official as investigations continue.
Providing an update on the NDPC’s role, Olatunji confirmed that both INEC and Ike had been invited for discussions.
“Emeka Ike is downstairs now. INEC officials were here last week and they have returned this week. We are actively engaging all relevant parties,” he stated.
According to the NDPC boss, the commission follows established procedures when handling privacy complaints and does not rely solely on information circulating on social media.
“Investigation is a process. In the privacy ecosystem, you must be diligent and careful. Every reported breach is treated seriously, whether it involves a government agency or a private organisation,” he said.
Olatunji explained that the commission assesses the scale and impact of alleged breaches before determining its response.
“We consider the credibility of the claim, the sensitivity of the information involved, the number of people affected and the likely consequences before deciding how to prioritise a case,” he noted.
He further revealed that the commission examines an organisation’s overall data protection practices whenever a breach is reported.
“When a breach is reported, we do not limit ourselves to that incident alone. We review the organisation’s entire data processing framework, including audits, privacy policies and compliance measures,” he explained.
The NDPC chief emphasized that the commission’s primary goal is to achieve compliance rather than impose sanctions.
“Our focus is remediation and corrective action. We do not rush to penalties unless organisations fail to do what is required under the law,” he said.
Beyond the ongoing investigation, Olatunji disclosed that the commission is collaborating with INEC to strengthen data protection awareness among political parties.
He expressed concern that many political organisations collect personal information from members and supporters without adequate safeguards.
“Many political parties gather large amounts of personal data but do not fully understand their obligations under the Nigeria Data Protection Act. We are ready to train them on responsible data handling practices,” he said.
The commissioner also announced that the commission has translated the Nigeria Data Protection Act into major Nigerian languages to improve public understanding of privacy rights.
“Citizens can now access and understand the law in Yoruba, Hausa and Igbo. This is part of our effort to deepen awareness across the country,” Olatunji added.
He stressed that data protection has become a crucial component of national security and public confidence in institutions.
“There can be no digital economy without trust, and there can be no public security without trust. Trust is built by actions, not words,” he said.
The NDPC reiterated its commitment to ensuring that public institutions, private organisations and political actors comply with data protection laws as Nigeria’s electoral and digital systems continue to evolve.
