ABUJA, NIGERIA — The Federal Government has intensified its crackdown on poor data handling within public administration by issuing a fresh compliance directive to all Ministries, Departments, and Agencies (MDAs). The latest order mandates strict adherence to the Nigeria Data Protection Act (NDP Act) 2023 to cultivate public trust and secure citizens’ personal information. Contained in Circular No. 59805/S.I/74, the document was signed by the Secretary to the Government of the Federation (SGF), Senator George Akume, explicitly reinforcing data accountability across the public sector.
This administrative directive explicitly reflects President Bola Tinubu’s strategic pivot toward a data-driven economy, drawing on his position that “data is the new oil”. Under the new guidelines, heads of public institutions are required to immediately designate qualified internal personnel as Data Protection Officers (DPOs). These officers will oversee organizational compliance and guide management on lawful processing. Furthermore, MDAs must submit the names of their appointed DPOs to the Nigeria Data Protection Commission (NDPC) for official registration and auditing.
Crucially, the directive shifts institutional legal liability directly onto top tier leadership. Permanent Secretaries, Accounting Officers, and Chief Executive Officers will be held personally accountable for any data protection failures or breaches within their respective agencies. To ensure compliance measures are robust, the circular instructs MDAs to make adequate budgetary provisions for essential technical safeguards, cybersecurity infrastructure, and staff awareness training. Public bodies are also expected to submit mandatory annual Data Protection Compliance Audit Returns to the commission within legally prescribed timelines.
Welcoming the move, the National Commissioner and CEO of the NDPC, Dr. Vincent Olatunji, lauded the Federal Government’s political will to protect the privacy rights of Nigerians. Dr. Olatunji stated that enforcing data accountability is vital to achieving the administration’s core national priorities. To assist public institutions through this transition, the NDPC has set up a specialized Regulatory Clinic. This clinical platform is designed to offer hands-on technical assistance and implementation support to MDAs struggling to meet their statutory obligations under the law.
-
UPDATES | ADVISORY | COMPLIANCE | NEWS
Nigeria Data Protection (Amendment) Bill, 2026: All you need to know.
A major debate is currently trending in the data protection space regarding the controversial Nigeria Data Protection Amendment Bill. The proposed bill, sponsored by Senator Ned Nwoko, seeks to introduce strict adjustments to how international tech companies handle Nigerian user data. The most heavily searched aspect of this bill is a mandate requiring every social […]
-
EVENTS | INTERNATIONAL | NEWS | UPDATES
ISACA Honours NDPC for Distinguished Regulatory Leadership in Nigeria
The Nigeria Data Protection Commission has received the Industry Leader Regulator Recognition Award from the ISACA Lagos Chapter during its 30th-anniversary celebration in Lagos. The ISACA Lagos Chapter honored the commission for its distinguished leadership, resilience, and commitment to building a trusted digital ecosystem in Nigeria. Ms. Omoikhefe Ahimie, the commission’s Lagos Liaison Officer, received […]
-
ADVISORY | COMPLIANCE | NEWS
Why non-compliant Businesses Are Being Locked Out of Government and Corporate Contracts
In business data protection compliance certificate is no longer just a regulatory formality—it is a mandatory license to do business. Across the globe, governments and major corporations are actively severing ties with third-party vendors, suppliers, and contractors who cannot prove their data protection compliance. If your organization lacks a valid data protection registration certificate, you […]
-
Fake Compliance Scams Target Small Businesses: How to Verify Your Data Protection Status for Free
As regulatory bodies crack down on data privacy violations, a rising wave of predatory compliance scams is targeting small businesses, charities, and independent professionals across the country. Fraudulent actors, posing as official agents, are demanding exorbitant fees for “mandatory” data protection registration certificates—fees that many struggling organizations simply cannot afford in today’s harsh economic climate. […]
-
The Beginner’s Guide to Renewing Your NDPC Data Protection Registration under the NDPA 2023
If your business collects, stores, or processes the personal data of up to 200 or more Nigerians within a six-month period—whether it’s customer phone numbers, BVNs, email addresses, or employee payroll—you are legally classified as a data controller or data processor. Under the Nigeria Data Protection Act (NDPA) 2023, managing this data comes with strict […]
-
ADVISORY | COMPLIANCE | DATA BREACH | INTERNATIONAL | NEWS | UPDATES
Multiple Nigerian Communications Commission Web Servers Compromised by Threat Actors
The Nigerian Communications Commission (NCC) is facing a significant security incident following a cyberattack that successfully compromised at least two of its public-facing web servers. Threat actors breached the infrastructure hosting consumer.ncc.gov.ng (the NCC Consumer Affairs bureau portal) and csirt.ncc.gov.ng (the official portal for the NCC’s Computer Security Incident Response Team). The irony of the […]
