FG directs MDAs to comply with Nigeria Data Protection Act

The Federal Government has issued a compliance circular directing all Ministries, Departments and Agencies (MDAs) to fully comply with Nigeria’s data protection laws as part of efforts to strengthen public trust and promote responsible data-driven governance.

The directive is contained in Circular No. 59805/S.I/74, dated July 27, 2026, and signed by the Secretary to the Government of the Federation (SGF), George Akume.

According to the circular, all MDAs are required to comply with the provisions of the Nigeria Data Protection Act (NDP Act) 2023, as well as regulations, guidelines and directives issued by the Nigeria Data Protection Commission (NDPC).

The government said the initiative forms part of broader regulatory reforms aimed at preparing Nigeria for opportunities and challenges associated with the Fourth Industrial Revolution.

The circular also referenced President Bola Tinubu’s statement that “data is the new oil,” stressing the need for government institutions to collect, manage and protect personal information responsibly in line with existing laws.

Key directives for MDAs

Under the new directive, all ministries and government agencies are required to:

Designate qualified Data Protection Officers (DPOs) to oversee compliance and advise management on lawful data processing.
Register the names and contact details of their DPOs with the Nigeria Data Protection Commission (NDPC).
Engage licensed Data Protection Compliance Organisations (DPCOs) where necessary to support compliance and conduct statutory audits.
Provide adequate budgetary allocations for data protection activities, including staff training, public awareness, cybersecurity measures and periodic compliance audits.
Submit mandatory Data Protection Compliance Audit Returns and other statutory reports to the NDPC within the timelines prescribed by law.

The circular further states that Permanent Secretaries, Accounting Officers and Chief Executive Officers of MDAs will be held personally responsible for ensuring compliance with both the directive and the Nigeria Data Protection Act.

Reacting to the development, the National Commissioner and Chief Executive Officer of the NDPC, Dr. Vincent Olatunji, welcomed the government’s commitment to protecting the privacy and personal data of Nigerians.

He said data accountability is essential to achieving the Tinubu administration’s development priorities and announced that the commission has established a regulatory clinic to provide technical support and guidance to MDAs as they implement the new compliance requirements.