FG Orders MDAs to Appoint Data Protection Officers

Under the directive, MDAs are required to appoint qualified data protection officers to oversee compliance and submit their names and contact details to the NDPC for registration.

The federal government has directed all ministries, departments and agencies (MDAs) to appoint data protection officers (DPOs) and fully comply with the provisions of the Nigeria Data Protection Act (NDP Act) 2023 as part of efforts to strengthen the protection of citizens' personal data.

The directive was contained in a circular dated July 27, 2026, signed by the Secretary to the Government of the Federation (SGF), George Akume, according to a statement issued by the Nigeria Data Protection Commission (NDPC) on Tuesday.

The circular mandates all MDAs to comply with the NDP Act, its regulations, guidelines and directives issued by the NDPC in relation to the processing of personal data.

Describing data as a strategic national asset, the SGF said government institutions must adopt robust measures to collect, process and safeguard information in line with the law.

"Data is the new oil; its value increases the more it is refined and responsibly shared," the circular stated.

It added: "I therefore direct all Ministries, Extra-Ministerial Departments and Agencies to capture information rigorously and safeguard it under the Nigeria Data Protection Act, 2023."

Under the directive, MDAs are required to appoint qualified data protection officers to oversee compliance and submit their names and contact details to the NDPC for registration.

The agencies are also expected to engage licensed Data Protection Compliance Organisations (DPCOs) where necessary, make adequate budgetary provisions for compliance activities, including staff training, awareness programmes, deployment of technical safeguards and periodic compliance audits.

In addition, all MDAs must submit mandatory data protection compliance audit returns and other statutory filings within timelines prescribed by law.

The circular places responsibility for compliance squarely on permanent secretaries, accounting officers and chief executive officers of MDAs, making them personally accountable for implementing the provisions of the Act.

Commenting on the directive, Babatunde Bamigboye, Head of Legal, Enforcement and Regulations at the NDPC, said the circular aligns with President Bola Tinubu's directive that government institutions must rigorously capture and safeguard information in accordance with the NDP Act.

Also speaking, the National Commissioner of the NDPC, Vincent Olatunji, said the commission had established a regulatory clinic to provide technical support to MDAs to facilitate compliance.

According to Olatunji, the initiative forms part of broader regulatory reforms aimed at strengthening Nigeria's data governance framework as the country positions itself for the opportunities of the Fourth Industrial Revolution.