NDPC orders MDAs to implement strict data governance
The Nigeria Data Protection Commission has issued a national compliance circular mandating all MDAs to implement strict enterprise data governance protocols.
The Nigeria Data Protection Commission (NDPC) issued a national compliance circular mandating all Ministries, Departments, and Agencies (MDAs) to implement strict enterprise data governance protocols. The policy standardises citizen data handling, encryption requirements, and public sector database protection.
The directive is a significant step towards protecting citizens’ data. The government holds vast amounts of personal data, and the NDPC’s mandate ensures that this data is handled securely. The focus on encryption and database protection is particularly important, as cyberattacks on government systems have become increasingly common.
This echoes the 2020 data protection regulations, which also sought to strengthen data security. The mechanism then was different, but the result was the same: a government taking action to protect citizens’ data.
The winners: Nigerian citizens, whose data will be better protected; and the NDPC, which has asserted its regulatory authority. The losers: MDAs that are non-compliant; and the Nigerian public, who must trust that the protocols will be enforced.
Bottom Line: The NDPC has mandated strict data governance for all MDAs. Citizens’ data will be better protected. The question is whether the protocols will be implemented or ignored.



