The Federal Government has issued a fresh directive to Ministries, Departments and Agencies (MDAs), mandating full compliance with the Nigeria Data Protection Act (NDP Act), 2023, as part of efforts to strengthen responsible data governance and boost public confidence in government institutions.

The directive, contained in Circular No. 59805/S.I/74 dated July 27, 2026, was signed by the Secretary to the Government of the Federation (SGF), Senator George Akume, according to a statement issued on Tuesday by the Head, Legal, Enforcement and Regulations of the Nigeria Data Protection Commission (NDPC), Babatunde Bamigboye.

The circular reminded MDAs of President Bola Tinubu’s directive on the strategic value of data to national development, stressing the need for public institutions to manage personal information responsibly.

It quoted the President as saying: “Data is the new oil: its value increases the more it is refined and responsibly shared. I therefore direct all Ministries, Extra-Ministerial Departments and Agencies to capture information rigorously and safeguard it under the Nigeria Data Protection Act, 2023.”

According to the directive, all federal MDAs must ensure full compliance with the provisions of the NDP Act, as well as regulations, guidelines and directives issued by the NDPC on the processing of personal data.

To achieve this, the government directed all MDAs to appoint suitably qualified Data Protection Officers (DPOs) to oversee institutional compliance and advise management on lawful processing of personal data.

The agencies are also required to forward the names and contact details of their designated DPOs to the NDPC for registration and official records.

The circular further instructed MDAs to engage licensed Data Protection Compliance Organisations (DPCOs), where necessary, to support compliance with the law and facilitate statutory data protection audits.

In addition, government institutions were directed to make adequate budgetary provisions for data protection activities, including staff capacity building, awareness programmes, deployment of technical safeguards and periodic compliance audits.

The Federal Government also mandated all MDAs to submit Data Protection Compliance Audit Returns and other statutory reports to the NDPC within timelines prescribed by law.

To ensure strict implementation, the circular placed responsibility for compliance on permanent secretaries, accounting officers and chief executive officers of MDAs, warning that they would be personally accountable for ensuring adherence to both the circular and the provisions of the Nigeria Data Protection Act.

Reacting to the directive, the National Commissioner and Chief Executive Officer of the NDPC, Dr. Vincent Olatunji, commended the Tinubu administration for demonstrating what he described as strong legal and political commitment to protecting the privacy rights and fundamental freedoms of Nigerians.

Olatunji said effective data governance and accountability remain essential to achieving the eight priority areas of the Federal Government.

He disclosed that the commission had established a regulatory clinic to provide technical support to MDAs and assist them in complying with the requirements of the Nigeria Data Protection Act.

According to him, the initiative forms part of broader regulatory measures being pursued by the commission to strengthen Nigeria’s digital governance framework as the country positions itself to take advantage of opportunities presented by the Fourth Industrial Revolution.

The NDPC said the latest directive  indicates the Federal Government’s determination to institutionalise responsible data management across the public sector while ensuring that personal information entrusted to government institutions is processed in line with global best practices and the provisions of the law.