SGF Orders MDAs to Appoint Data Protection Officers for NDP Act Compliance

The Federal Government has issued a compliance circular directing all Ministries, Departments and Agencies, MDAs in order to fully implement the Nigeria Data Protection Act, 2023, as part of efforts to promote public trust and responsible through data-driven governance.

According to a press release on Monday, August 3, 2026 by Head, Legal, Enforcement and Regulations, Babatunde Bamigboye, the directive is contained in Circular No. 59805/S.I/74 dated 27 July 2026 and signed by the Secretary to the Government of the Federation, Senator George Akume, CON.

It was revealed that the circular quoted President Bola Ahmed Tinubu, GCFR, as stating: “Data is the new oil: its value increases the more it is refined and responsibly shared. I therefore direct all Ministries, Extra-Ministerial Departments and Agencies to capture information rigorously and safeguard it under the Nigeria Data Protection Act, 2023 (NDP Act).”

The Federal Government Circular mandates MDAs to ensure “full compliance with the NDP Act, Regulations, Guidelines, and Directives issued by the Nigeria Data Protection Commission (NDPC) in relation to the processing of personal data.”

Specifically, MDAs are directed to:

a) Appoint DPOs: Designate suitably qualified officers as Data Protection Officers (DPOs) to oversee compliance and advise management on lawful processing of personal data.

b) Register with NDPC: Submit the names and contact details of designated DPOs to the NDPC for registration and official records. MDAs are also to engage licensed Data Protection Compliance Organisations, DPCOs, where required, to support statutory compliance audits.

c) Budget for Compliance: Provide adequate budgetary allocation for data protection activities, including capacity building, public awareness, deployment of technical safeguards, and periodic compliance audits.

d) File Returns: Submit all mandatory Data Protection Compliance Audit Returns and other statutory returns to the NDPC within the timelines prescribed by law.

The statement further disclosed that in a major accountability clause, the circular states that “Permanent Secretaries, Accounting Officers and Chief Executive Officers of all MDAs shall be personally responsible for ensuring institutional compliance with the Circular and the provisions of the NDP Act.”

While applauding the legal and political will demonstrated by the administrator of President Bola Ahmed Tinubu in protecting the privacy and fundamental freedoms of data subjects in Nigeria, the National Commissioner/CEO of the NDPC, Dr. Vincent Olatunji welcomed the directive and reaffirmed the commission’s commitment to supporting data driven governance. “NDPC remains committed to providing full technical support to MDAs,” he said.

He stated that data accountability is pivotal to achieving the eight Presidential Priorities of the Tinubu administration.

To provide technical support, Dr. Olatunji disclosed that the Commission has constituted a “regulatory clinic” to assist MDAs in meeting compliance requirements.

in protecting the privacy and fundamental freedoms of data subjects in Nigeria, the NDPC remains committed to providing full technical support to MDAs,” he said.

Additionally, Dr. Olatunji declared that the initiative forms part of a continuum of regulatory measures that will be “vigorously pursued as Nigeria advances towards the decisive frontiers of the Fourth Industrial Revolution.”

Nevertheless, the circular signals a shift toward stricter enforcement of data protection across government. With the NDP Act 2023 now in full effect, all MDAs that collect, process, or store personal data of Nigerians will be required to demonstrate accountability, security safeguards, and transparency.

The appointment of DPOs and engagement of DPCOs are expected to institutionalize data governance within the public sector, while budget provisions and audit returns will ensure compliance is tracked and funded.

However, MDAs have been directed to commence immediate implementation and align all data processing activities with NDPC guidelines.


Stay informed with the latest news, government policies, business, technology, and national developments.  Visit LouisaOlaniyi.com.ng. for credible updates that matter to you.

Leave a Reply

Your email address will not be published. Required fields are marked *