FG issues data protection compliance directive to MDAs

Secretary to the Government of the Federation, George Akume
The Federal Government has issued a data protection compliance circular to all Ministries, Departments and Agencies (MDAs), directing them to strengthen data governance and promote public trust through responsible use of information.

The directive is contained in Circular No. 59805/S.I/74, dated July 27, 2026, and signed by the Secretary to the Government of the Federation (SGF), George Akume, according to a statement by Babatunde Bamigboye, Head of Legal, Enforcement and Regulations.

The circular is part of ongoing regulatory measures aimed at strengthening Nigeria’s digital governance framework as the country advances towards the frontiers of the Fourth Industrial Revolution.

It referenced President Bola Tinubu’s statement that “data is the new oil,” while directing MDAs to ensure that information is properly collected, managed and protected in line with the Nigeria Data Protection Act, 2023 (NDPA).

Akume directed all ministries, extra-ministerial departments and agencies to comply fully with the NDPA, its regulations, guidelines and directives issued by the Nigeria Data Protection Commission (NDPC) on the processing of personal data.

Under the directive, MDAs are required to:

  • Appoint suitably qualified Data Protection Officers (DPOs) responsible for overseeing compliance and advising management on the lawful processing of personal data.
  • Submit the names and contact details of their designated DPOs to the NDPC for registration and official records.
  • Engage licensed Data Protection Compliance Organisations (DPCOs), where necessary, to support compliance efforts and conduct statutory audits.
  • Provide adequate budgetary provisions for data protection activities, including training, awareness programmes, technical safeguards and periodic compliance reviews.
  • Submit mandatory Data Protection Compliance Audit Returns and other statutory reports to the NDPC within legally prescribed timelines.

The circular further stated that Permanent Secretaries, Accounting Officers and Chief Executive Officers of all MDAs would be personally responsible for ensuring institutional compliance with its provisions and the requirements of the NDPA.

Commending the administration of President Tinubu for demonstrating legal and political commitment towards protecting the privacy and fundamental rights of data subjects, the National Commissioner and Chief Executive Officer of the NDPC, Dr Vincent Olatunji, reaffirmed the Commission’s commitment to supporting data-driven governance.

Olatunji said data accountability was critical to achieving the government’s eight Presidential Priorities, adding that the Commission had established a regulatory clinic to provide technical support to MDAs in meeting compliance requirements.