By 
The Independent National Electoral Commission (INEC) has requested guidance and awareness on data protection from the Nigeria Data Protection Commission (NDPC). This request was made during a meeting held at INEC headquarters in Abuja, aiming to ensure the proper safeguarding of personal data for Nigerian citizens in INEC’s database.
RELATED: NDPC chief urges developers to prioritize privacy in public sector solutions
The meeting focused on implementing adequate measures to protect citizens’ and voters’ personal data, thus ensuring credible elections. Dr. Vincent Olatunji, the National Commissioner/CEO of NDPC, praised INEC Chairman Prof. Mahmood Yakubu for his commitment to data protection and compliance with the Nigeria Data Protection Act.
“All of us are data subjects; INEC is a data controller. We must process data within the laws provided in the Nigeria Data Protection Act. Any data leakage here can lead to a lot of issues, with INEC being a data controller of major importance in Nigeria,” Dr. Olatunji emphasized.
Prof. Yakubu acknowledged the significance of data protection, noting that INEC stores the largest citizen database in Africa, with 93 million records from the last election. He stressed the need for early sensitization on data protection to ensure compliance and informed practices.
Dr. Olatunji emphasised the severe consequences of inadequate data protection measures, including reputational damage, financial loss, and extreme cases, even death. He outlined penalties for non-compliance, ranging from 10 million naira to 2 percent of gross earnings, and mentioned that CEOs could face jail time for violations.
To comply, INEC must establish a privacy policy, appoint Data Protection Officers (DPOs) at both headquarters and state levels, and engage a Data Protection Compliance Organisation (DPCO). The NDPC will conduct free training for INEC staff and appointed DPOs to ensure robust data protection.
An implementation committee comprising staff from both NDPC and INEC was immediately set up to implement data protection and privacy measures, aiming to guarantee trust and confidence in INEC’s data processing activities.
