The Federal Government has directed all Ministries, Departments and Agencies to fully comply with the Nigeria Data Protection Act, 2023, as part of efforts to strengthen responsible data governance and protect the personal information of Nigerians.
The directive was announced in a statement issued on Tuesday by the Head of Legal, Enforcement and Regulations at the Nigeria Data Protection Commission, Babatunde Bamigboye.
According to the statement, the directive follows a circular issued by the Secretary to the Government of the Federation, Senator George Akume, on July 27, 2026, in line with President Bola Tinubu’s instruction that government institutions must properly collect, manage and safeguard data in accordance with the law.
Bamigboye quoted the directive as saying, “Data is the new oil; its value increases the more it is refined and responsibly shared. All Ministries, Extra-Ministerial Departments and Agencies are therefore required to rigorously capture information and safeguard it under the Nigeria Data Protection Act, 2023.”
He added that the circular mandates all MDAs to comply with the provisions of the Act, as well as regulations, guidelines and directives issued by the Nigeria Data Protection Commission on the processing of personal data.
The government also directed the agencies to appoint qualified Data Protection Officers to oversee compliance, advise management on lawful data processing and submit the officers’ names and contact details to the commission for registration.
In addition, MDAs were instructed to engage licensed Data Protection Compliance Organisations where necessary to support compliance with the law and conduct statutory data protection audits.
The statement further noted that government institutions are expected to make adequate budgetary provisions for data protection activities, including staff training, public awareness programmes, deployment of technical safeguards and periodic compliance audits.
“MDAs are also required to submit all mandatory Data Protection Compliance Audit Returns and other statutory returns to the commission within the timelines prescribed by law,” Bamigboye said.
He explained that Permanent Secretaries, Accounting Officers and Chief Executive Officers of MDAs would be held personally responsible for ensuring their institutions comply with both the government circular and the provisions of the Nigeria Data Protection Act.
The National Commissioner of the Nigeria Data Protection Commission, Dr Vincent Olatunji, commended the Tinubu administration for prioritising the protection of citizens’ privacy and fundamental rights.
According to him, “Data accountability is essential to achieving the administration’s Eight Presidential Priorities.”
Olatunji disclosed that the commission had established a regulatory clinic to provide technical support to MDAs and help them meet their compliance obligations.
He added that the initiative forms part of broader efforts to strengthen Nigeria’s data governance framework as the country advances towards the Fourth Industrial Revolution.
