Nigeria Tightens Data Governance Rules Across Government Agencies
The directive, announced by the Nigeria Data Protection Commission (NDPC), is aimed at promoting public trust through responsible management of personal data across government institutions.
The Federal Government of Nigeria has issued a compliance circular directing all Ministries, Departments and Agencies (MDAs) to strengthen data protection and responsible data governance in line with the Nigeria Data Protection Act (NDP Act) 2023. The directive, announced by the Nigeria Data Protection Commission (NDPC), is aimed at promoting public trust through responsible management of personal data across government institutions.
According to the Commission, the directive is contained in Circular No. 59805/S.I/74, dated 27 July 2026, and signed by the Secretary to the Government of the Federation, Senator George Akume. The circular draws attention to President Bola Ahmed Tinubu’s directive that government institutions must rigorously capture and safeguard information in compliance with the Nigeria Data Protection Act.
Under the new directive, all MDAs are required to ensure full compliance with the NDP Act, its regulations, guidelines and directives issued by the NDPC regarding the processing of personal data. The circular also instructs government institutions to appoint suitably qualified Data Protection Officers (DPOs) to oversee compliance and advise management on lawful data processing practices.
In addition, MDAs are required to submit the names and contact details of their designated DPOs to the NDPC for official registration, engage licensed Data Protection Compliance Organisations (DPCOs) where necessary to support statutory compliance audits, allocate adequate budgets for data protection activities—including awareness programmes, technical safeguards and periodic compliance audits—and submit all mandatory Data Protection Compliance Audit Returns and other statutory reports within legally prescribed timelines.
The circular further places responsibility for compliance on the leadership of government institutions, stating that Permanent Secretaries, Accounting Officers and Chief Executive Officers of all MDAs will be personally accountable for ensuring institutional compliance with both the circular and the provisions of the Nigeria Data Protection Act.
The NDPC said the initiative reflects the Federal Government’s commitment to strengthening privacy protection and data-driven governance as Nigeria advances its digital transformation agenda. The Commission’s National Commissioner and Chief Executive Officer, Dr. Vincent Olatunji, reaffirmed the agency’s commitment to supporting MDAs through technical assistance, noting that the Commission has established a regulatory clinic to help public institutions achieve compliance.
According to the Commission, the compliance circular forms part of a broader programme of regulatory measures designed to strengthen data governance, improve accountability and support Nigeria’s transition towards the Fourth Industrial Revolution.
