Federal Government Issues Compliance Circular On Data Protection And Responsible Data Governance For MDAS

INTRODUCTION

The Federal Government has issued a Compliance Circular directing all Ministries, Departments and Agencies ("MDAs") to strengthen compliance with the Nigeria Data Protection Act, 2023 (“NDPA”) and all regulations, guidelines and directives issued by the Nigeria Data Protection Commission (“NDPC”).1

The Circular, signed by the Secretary to the Government of the Federation, introduces specific governance and compliance measures for MDAs and places renewed emphasis on institutional accountability for the lawful processing of personal data.

WHAT MDAs ARE REQUIRED TO DO

1. Appoint a Data Protection Officer: Every MDA is required to designate a qualified officer as a Data Protection Officer (“DPO”) to oversee compliance with the NDPA and advise management on matters relating to the lawful processing of personal data. MDAs should therefore assess whether their current DPO arrangements satisfy the expectations set out in the Circular.