FG directs MDAs to comply with Data Protection Act

The Federal Government has directed all Ministries, Departments and Agencies (MDAs) to fully comply with the Nigeria Data Protection Act (NDP Act), 2023, as part of efforts to strengthen responsible data governance and enhance public trust in government institutions.

 

The directive was contained in a statement issued in Abuja on Tuesday by the Head of Legal, Enforcement and Regulations at the Nigeria Data Protection Commission (NDPC), Babatunde Bamigboye.

 

Bamigboye said the directive followed Circular No. 59805/S.I/74, dated July 27, 2026, issued by the Secretary to the Government of the Federation, Senator George Akume.

 

According to him, the circular aligns with President Bola Tinubu’s directive that government institutions must properly collect and safeguard information in accordance with the provisions of the Nigeria Data Protection Act.

 

“Data is the new oil: its value increases the more it is refined and responsibly shared.

 

“I therefore direct all Ministries, Extra-Ministerial Departments and Agencies to capture information rigorously and safeguard it under the Nigeria Data Protection Act, 2023 (NDP Act).

 

“The Federal Government circular directs MDAs to ensure full compliance with the NDP Act, regulations, guidelines and directives issued by the Nigeria Data Protection Commission in relation to the processing of personal data,” Bamigboye said.

 

The circular also mandates MDAs to appoint qualified Data Protection Officers (DPOs) to oversee compliance, advise management on lawful data processing, and submit the officers’ names and contact details to the NDPC for registration.

 

In addition, MDAs are required to engage licensed Data Protection Compliance Organisations (DPCOs) where necessary to support compliance with the Act and facilitate statutory compliance audits.

 

The government further directed agencies to make adequate budgetary provisions for data protection activities, including staff capacity building, public awareness programmes, deployment of technical safeguards and periodic compliance audits.

 

MDAs are also expected to submit all mandatory Data Protection Compliance Audit Returns and other statutory returns to the NDPC within timelines prescribed by law.

 

Bamigboye said Permanent Secretaries, Accounting Officers and Chief Executive Officers of MDAs would be held personally responsible for ensuring compliance with both the circular and the provisions of the NDP Act.

 

He quoted the National Commissioner of the NDPC, Dr Vincent Olatunji, as commending the Tinubu administration for its commitment to protecting the privacy and fundamental rights of Nigerians.

 

According to Olatunji, data accountability is essential to achieving the administration’s Eight Presidential Priorities, adding that the commission has established a regulatory clinic to provide technical support to MDAs in meeting their compliance obligations.