FG orders MDAs to comply with data protection law

The Federal Government has issued a compliance circular to Ministries, Departments and Agencies (MDAs) on data protection law.

The compliance directive is contained in Circular No. 59805/S.I/74, dated 27 July 2026, and signed by the Secretary to the Government of the Federation, Senator George Akume, a statement by the National Data Protection Commission (NDPC) said on Tuesday.

The Circular drew the attention of MDAs to the directive of President Bola Ahmed Tinubu, which states that, ‘Data is the new oil: its value increases the more it is refined and responsibly shared. I therefore direct all Ministries, Extra-Ministerial Departments and Agencies to capture information rigorously and safeguard it under the Nigeria Data Protection Act, 2023 (NDP Act).’

The Federal Government Circular directs MDAs to ensure ‘full compliance with the NDP Act, Regulations, Guidelines, and Directives issued by the Nigeria Data Protection Commission (NDPC) in relation to the processing of personal data.’

The government said this to promote public trust through data-driven governance.

The circular directs MDAs to designate suitably qualified officers as Data Protection Officers (DPOs) to oversee data protection compliance and advise management on all matters relating to the lawful processing of personal data.

It also said MDAs must ensure that the names and contact details of their designated DPOs are communicated to the NDPC for registration and official records; engage licensed Data Protection Compliance Organisations (DPCOs), where required, to facilitate compliance with the NDP Act and support the conduct of statutory compliance audits.

They should also provide adequate budgetary allocation for data protection compliance activities, including capacity building, awareness programmes, deployment of appropriate technical safeguards, and periodic compliance audits.

Similarly they should submit all mandatory Data Protection Compliance Audit Returns and other statutory returns to the NDPC within the timelines prescribed by law.

The circular further states that ‘Permanent Secretaries, Accounting Officers and Chief Executive Officers of all MDAs shall be personally responsible for ensuring institutional compliance with the Circular and the provisions of the NDP Act.’

While applauding the legal and political will demonstrated by the administration of president Tinubu in protecting the privacy and fundamental freedoms of data subjects in Nigeria, the National Commissioner/Chief Executive Officer of the NDPC, Dr Vincent Olatunji, expressed the Commission’s commitment to supporting data-driven governance.

Olatunji maintained that data accountability is pivotal to achieving the eight Presidential Priorities.

Leave a Reply

Your email address will not be published. Required fields are marked *