NDPC advocates data privacy for Nigeria’s digital election management

The Nigeria Data Protection Commission (NDPC) is prioritising the protection of voter data as Nigeria continues to integrate digital technologies into its electoral processes. The regulator is focusing on mitigating risks such as voter profiling and data breaches to maintain public confidence in democratic institutions.

Speaking at the Nigeria eGovernment Summit 2026, the National Commissioner/CEO of the NDPC, Dr Vincent Olatunji, addressed the theme, “Mainstreaming Technologies in Nigeria Election Management: The Data Protection Imperative.” He noted that while the evolution from manual processes to digital tools like the Bimodal Voter Accreditation System (BVAS) and the INEC Result Viewing (IReV) portal has improved efficiency and transparency, it has also increased the volume of sensitive biometric and personal data being processed.

Electoral data risks and vulnerabilities

Dr Olatunji warned that every stage of the modern electoral process leaves a digital trail, creating both opportunities for efficiency and significant privacy risks. He identified several key vulnerabilities introduced by technological advancement, including:

• Data breaches: Unauthorized access to voter databases.
• Voter profiling: The misuse of personal data to target or manipulate voters.
• Third-party risks: Vulnerabilities introduced by external technology vendors.
• Loss of trust: The potential for digital failures to undermine the legitimacy of election results.

The Commission stressed that technological success alone is insufficient; citizens must trust that their data is secure and that results are authentic for elections to remain legitimate.

Strengthening the digital electoral ecosystem

To address these challenges, the Nigeria Data Protection Commission is collaborating with the Independent National Electoral Commission (INEC) to ensure that voters’ sensitive information is well-protected under the Nigeria Data Protection Act, 2023.

The NDPC outlined a strategy to build a trusted digital electoral ecosystem through legislative reforms, mandatory Data Privacy Impact Assessments (DPIAs), independent audits, and enhanced capacity building for stakeholders. These measures are intended to safeguard citizens’ rights and strengthen democratic governance ahead of the 2027 general elections and beyond.