Ahead of the 2027 general election, stakeholders have stressed the need for comprehensive data protection assessments across Nigeria’s electoral ecosystem.

They warned that the growing reliance on digital technologies in elections has heightened risks associated with personal data misuse.

This was at a webinar hosted by Digital Rights Lawyers Initiative (DRLI) and supported by Luminate with the theme “2027 General Elections, Voters’ Privacy and Public Trust: Matters Arising.”

Senior Programme Officer at the Policy and Innovation Network (PIN), Khadijah El-Usman, noted that elections have become increasingly data-driven, with voter information now collected through biometric registration and technologies such as the Bimodal Voter Accreditation System (BVAS).

According to her, concerns over data protection extend beyond the Independent National Electoral Commission (INEC) to telecommunications companies, political parties, campaign organisations and other actors involved in the electoral process.

She said institutions handling voter information must clearly identify what personal data they collect, the purpose for collecting it, who has access to it, how it is stored, shared and eventually deleted.

El-Usman warned that weak controls could expose sensitive information to misuse, intimidation and political profiling.

She cited reported incidents of internal data leaks and the abuse of authorised access, arguing that such developments underscore the need for stronger accountability measures, role-based access controls, continuous monitoring and independent cybersecurity audits.

She also called for greater transparency from the Nigeria Data Protection Commission (NDPC) and other oversight institutions, insisting that public trust in electoral and data governance processes can only be strengthened through openness.

“Transparency is what will build trust and confidence. The public needs to know what has been done, what is being investigated and what standards will be enforced going forward,” she said.

Deputy Director of the Socio-Economic Rights and Accountability Project (SERAP), Oluwadare Kolawole, described privacy as an enabler of democratic governance, noting that citizens must be able to participate in electoral processes without fear of intimidation, surveillance or misuse of their personal information.

According to him, confidence in elections is strengthened when voters trust that their data will be protected and not deployed against them because of their political choices.

Kolawole referenced the controversy surrounding the leaked voter registration details of actor Emeka Ike, describing it as an example of the risks posed by inadequate data protection.

He argued that safeguarding personal information is essential to guaranteeing citizens’ rights to freedom of expression, association and political participation.

“It would also mean that surveillance would not be deployed against those who perhaps showed their preference for political parties or particular candidates. They can engage in political discussions and attend meetings for their preferred candidates before and after elections,” he said.

He further warned against political profiling and online labelling of individuals based on their views, saying such practices could discourage civic engagement.

Kolawole maintained that protecting voters’ data would boost public confidence in the electoral system and strengthen trust in INEC as preparations for the 2027 polls gather momentum.

Human rights lawyer and Principal Counsel at Inibehe Effiong Chambers, Inibehe Effiong argued that while Section 37 of the Constitution guarantees the right to privacy and the Nigerian Data Protection Act (NDPA) 2023 provides statutory safeguards, questions remain about INEC’s ability to uphold those obligations.

According to him, previous incidents, including reports of discarded Permanent Voter Cards (PVCs) and inaccuracies in the voter register, have undermined confidence in the commission’s data management systems.

Also referring to the recent controversy involving actor Emeka Ike’s voter information, Effiong cautioned against treating the matter as an isolated incident.

He maintained that the issue highlights broader concerns about institutional weaknesses and the handling of sensitive voter data.

“The problem is not a lack of laws. Nigeria has extensive constitutional and statutory provisions on privacy rights. The challenge is whether institutions have the integrity and capacity to enforce those rights,” he said.

Effiong urged Nigerians and civil society groups to continue demanding accountability from INEC ahead of the 2027 general elections, stressing that data privacy must be protected before, during and after elections.

He also called for greater transparency regarding unresolved concerns surrounding the electoral commission’s Result Viewing Portal (IReV).

Head of Research and Monitoring and Evaluation at Yiaga Africa, Safiya Bichi noted that the growing adoption of technology and Artificial Intelligence (AI) in elections makes data protection a critical component of credible polls.

She identified compliance with Nigeria’s data protection laws as a key indicator of electoral integrity, urging INEC to maintain a robust data protection policy to guide the handling of citizens’ information.

According to her, the security of the voter register database, one of the country’s largest repositories of personal information, must be guaranteed through strict procedures governing data collection, storage and sharing.

She observed that while INEC shares voter registers with political parties and state electoral commissions as required by law, sensitive biometric data are excluded.

Bichi also called for stronger access controls, effective tracking of data breaches and greater accountability in managing databases hosted outside Nigeria.

She warned that clear legal frameworks are needed to govern cross-border data storage and ensure citizens’ information is adequately protected against misuse.