Aug 4, 2026

FG Directs All MDAs to Enforce Strict Data Protection Compliance Rules

By Afolabi Olaiya Idowu in news

👁️ loading views...

Abuja, Nigeria – August 4, 2026 — The Federal Government has issued a sweeping compliance circular directing all Ministries, Departments and Agencies (MDAs) to fully implement data protection measures under the Nigeria Data Protection Act, 2023, as part of efforts to build public trust in data-driven governance.

The directive is contained in Circular No. 59805/S.I/74, dated 27 July 2026 and signed by the Secretary to the Government of the Federation, George Akume.

It was announced in a statement by the Head of Legal, Enforcement & Regulations at the Nigeria Data Protection Commission (NDPC), Babatunde Bamigboye.

Data as the New Oil

The circular draws attention to President Bola Tinubu’s statement that “Data is the new oil” and instructs MDAs to rigorously capture and safeguard information in line with the NDP Act.

It forms part of a broader set of regulatory measures as Nigeria advances into the Fourth Industrial Revolution.

All MDAs are directed to ensure full compliance with the NDP Act, as well as regulations, guidelines, and directives issued by the NDPC regarding the processing of personal data.

Key Obligations for MDAs

Under the circular, MDAs must:

- Designate suitably qualified officers as Data Protection Officers (DPOs) to oversee compliance and advise management on lawful data processing.

- Communicate the names and contact details of their DPOs to the NDPC for registration.

- Engage licensed Data Protection Compliance Organisations (DPCOs) where required to support statutory compliance audits.

- Provide adequate budgetary allocation for capacity building, awareness programmes, technical safeguards and periodic audits.

- Submit all mandatory Data Protection Compliance Audit Returns and other statutory reports to the NDPC within prescribed timelines.

The circular further states that Permanent Secretaries, Accounting Officers and Chief Executive Officers of all MDAs shall be personally responsible for ensuring institutional compliance.

NDPC Welcomes the Directive

National Commissioner and Chief Executive Officer of the NDPC, Dr Vincent Olatunji, applauded the legal and political will demonstrated by the Tinubu administration in protecting the privacy and fundamental freedoms of data subjects in Nigeria.

He described data accountability as pivotal to achieving the eight Presidential Priorities and announced that the Commission has constituted a regulatory clinic to provide full technical support to MDAs in meeting the new requirements.

The move underscores the Federal Government’s determination to strengthen data governance, protect citizens’ personal information and position Nigeria competitively in the digital economy.