By 
Tinubu administration mandates federal agencies to embed privacy, accountability and data governance in public service delivery
The Federal Government has directed all Ministries, Departments and Agencies (MDAs) to fully comply with Nigeria’s data protection laws, reinforcing its commitment to building a secure, transparent and data-driven public sector that strengthens citizens’ trust in government.
RELATED: NDPC calls for stronger data protection accountability at WACC 2026
The directive, contained in Circular No. 59805/S.I/74 dated July 27, 2026, was issued by the Secretary to the Government of the Federation (SGF), Senator George Akume, under the authority of President Bola Ahmed Tinubu.
The circular mandates that every federal MDA must institutionalise robust data protection governance across its operations. This requires the appointment of qualified Data Protection Officers (DPOs), the allocation of dedicated compliance budgets, and the timely filing of statutory audit reports with the Nigeria Data Protection Commission (NDPC). Additionally, all MDAs are expected to implement strong safeguards to ensure the lawful and secure processing of personal data at all times.
Tinubu: ‘Data is the New Oil’
The circular draws attention to President Tinubu’s directive that positions data as one of Nigeria’s most strategic national assets.
“Data is the new oil: its value increases the more it is refined and responsibly shared. I therefore direct all Ministries, Extra-Ministerial Departments and Agencies to capture information rigorously and safeguard it under the Nigeria Data Protection Act, 2023.”
The directive underscores the administration’s determination to leverage trusted data for evidence-based policymaking, digital governance and national development while protecting the privacy and fundamental rights of Nigerians.
MDAs Directed to Institutionalise Data Protection
To strengthen compliance with the Nigeria Data Protection Act (NDP Act) 2023, the Federal Government directed all MDAs to implement several mandatory measures.
These include:
- Appoint suitably qualified Data Protection Officers (DPOs) to oversee compliance and advise management on lawful data processing.
- Register the names and contact details of designated DPOs with the Nigeria Data Protection Commission (NDPC).
- Engage licensed Data Protection Compliance Organisations (DPCOs) where necessary to conduct statutory compliance audits.
- Provide dedicated budgetary allocations for privacy awareness programmes, staff capacity building, cybersecurity measures, technical safeguards and periodic compliance assessments.
- Submit annual Data Protection Compliance Audit Returns and other statutory reports to the NDPC within prescribed timelines.
According to the circular, all federal institutions are required to ensure full compliance with the provisions of the NDP Act, related regulations, implementation guidelines and directives issued by the Commission.
Agency Heads Face Personal Accountability
The new directive significantly raises the accountability threshold for public institutions by placing direct responsibility on their leadership.
The circular states that Permanent Secretaries, Accounting Officers and Chief Executive Officers of federal MDAs will be personally responsible for ensuring institutional compliance with Nigeria’s data protection laws.
The move is expected to strengthen executive oversight of data governance across government institutions while promoting stronger compliance culture throughout the public sector.
Data Governance Becomes Strategic National Priority
Beyond legal compliance, the directive reflects the Federal Government’s broader ambition to build a modern digital public sector anchored on trusted data governance.
The framework is expected to improve the quality, security and integrity of government data while enabling more effective digital service delivery, evidence-based policymaking and citizen confidence in government institutions.
Industry observers note that the directive also aligns with Nigeria’s growing digital economy agenda, where secure handling of personal information has become essential for digital identity, e-government services, artificial intelligence, financial technology and public sector innovation.
NDPC Establishes Regulatory Support Clinic
Welcoming the directive, the National Commissioner and Chief Executive Officer of the Nigeria Data Protection Commission (NDPC), Dr. Vincent Olatunji, commended President Tinubu’s administration for demonstrating strong political commitment to protecting the privacy rights and fundamental freedoms of Nigerians.
He described data accountability as a critical enabler of the Federal Government’s Eight Presidential Priorities, noting that effective data governance will improve transparency, institutional efficiency and public trust.
To support implementation across the public sector, Olatunji disclosed that the Commission has established a Regulatory Clinic to provide technical assistance to MDAs seeking to comply with the provisions of the Nigeria Data Protection Act.
The initiative will offer guidance on compliance obligations, institutional capacity development, audit requirements and implementation of appropriate organisational and technical safeguards.
Positioning Nigeria for the Fourth Industrial Revolution
The latest compliance directive represents another significant milestone in Nigeria’s evolving digital governance framework as the country positions itself to harness opportunities presented by the Fourth Industrial Revolution.
By embedding privacy, accountability and responsible data management into public administration, the Federal Government aims to create a trusted digital ecosystem capable of supporting innovation, digital public infrastructure, artificial intelligence adoption and inclusive economic growth.
The directive also reinforces the strategic role of the Nigeria Data Protection Commission as the country’s lead regulator for privacy and data governance while advancing Nigeria’s ambition to build a globally competitive digital economy founded on trust, security and responsible data use.
