FG Orders mads to Strengthen Data Protection, Enforce Localisation

The Federal Government has directed all Ministries, Departments and Agencies (mads) to comply fully with Nigeria’s data protection laws as part of efforts to strengthen the security and responsible management of citizens’ personal information.

The directive is contained in Circular No. 59805/S.I/74, dated July 27, 2026, and signed by the Secretary to the Government of the Federation, Senator George Akume.

The circular reinforces the government’s growing focus on data governance as Nigeria expands its digital economy and increases the use of technology in public administration.

President Bola Ahmed Tinubu, while stressing the importance of data to the modern economy, said, “Data is the new oil: its value increases the more it is refined and responsibly shared.”

He consequently directed mads to ensure that information is collected and managed responsibly while complying with the Nigeria Data Protection Act, 2023.

Under the new directive, every MDA is expected to appoint qualified Data Protection Officers (DPOs) to oversee privacy and data protection compliance. The officers must be registered with the Nigeria Data Protection Commission (NDPC).

Government institutions may also engage licensed Data Protection Compliance Organisations (DPCOs) to assist with compliance audits and other statutory responsibilities.

The circular further requires mads to make adequate budgetary provisions for staff training, public awareness campaigns, appropriate data security technologies and regular compliance audits.

They are also expected to submit mandatory Data Protection Compliance Audit Returns within the timelines stipulated by law.

The government warned that Permanent Secretaries, Accounting Officers and Chief Executive Officers of mads would be held personally accountable for ensuring compliance with the directive and the provisions of the Nigeria Data Protection Act.

Reacting to the development, the National Commissioner and Chief Executive Officer of the NDPC, Dr Vincent Olatunji, described the directive as another indication of the Federal Government’s commitment to protecting the privacy and fundamental rights of Nigerians.

Olatunji said responsible data governance had become increasingly important as Nigeria implements its Presidential Priorities and develops a modern digital economy.

To support mads in meeting the new requirements, the NDPC has established a regulatory clinic to provide technical guidance, respond to compliance-related questions and assist public institutions in achieving full compliance.

The directive comes as government agencies increasingly rely on digital platforms and technologies to deliver public services.

With the growing use of artificial intelligence, cloud computing and digital identity systems, the government’s renewed emphasis on data protection is expected to strengthen public confidence in how citizens’ personal information is collected, stored and processed.

Ultimately, the policy underscores the Federal Government’s position that personal data is a valuable national asset that must be protected through stronger governance, accountability and security measures.