The Nigeria Data Protection Commission (NDPC) has opened an investigation into the alleged disclosure of personal voter information belonging to actor and politician Emeka Ike.
The commission confirmed that it has already engaged both the Independent National Electoral Commission (INEC) and Ike as part of efforts to determine how the information became public.
Speaking during a media briefing in Abuja on Friday, the National Commissioner and Chief Executive Officer of the NDPC, Dr Vincent Olatunji, described the matter as highly sensitive, particularly because of its potential implications for public confidence in Nigeria’s electoral system.
The controversy began after Lere Olayinka, Senior Special Assistant on Information to the Minister of the Federal Capital Territory, Nyesom Wike, shared details relating to Ike’s voter registration on social media. The post reportedly included screenshots showing personal information linked to Ike’s voter transfer application from Imo State to the Federal Capital Territory.
The images contained details such as his voter identification number, application number, registration centre, photograph and date of application, prompting concerns about whether unauthorised individuals had gained access to information stored in INEC’s database.
INEC has maintained that its Continuous Voter Registration platform was not hacked. According to the commission, the incident stemmed from the misuse of authorised credentials by individuals with legitimate access rather than an external cyberattack.
The matter has also attracted the attention of law enforcement authorities, with investigators reportedly questioning both Olayinka and an electoral officer over the circumstances surrounding the disclosure.
Providing an update on the NDPC’s response, Olatunji said the commission had already held discussions with the relevant parties and was conducting a thorough review of the allegations.
He explained that data protection investigations require careful examination of facts and evidence, noting that the commission does not rely solely on social media reports before taking action.
According to him, the alleged leak has been prioritised because it raises concerns about the integrity and security of electoral records ahead of future elections.
Olatunji stated that the NDPC evaluates every reported breach by examining factors such as the accuracy of the complaint, the number of individuals affected, the sensitivity of the information involved and the potential impact on data subjects.
He stressed that all complaints received by the commission are investigated, regardless of the status of the institution or individual concerned.
The NDPC boss further explained that investigations extend beyond a single incident. Organisations found to be involved in a reported breach are assessed on their overall data protection practices, including compliance audits, privacy policies, appointment of data protection officers and other safeguards required under the law.
He noted that the commission generally prioritises corrective measures and compliance over punitive sanctions, adding that remediation remains the primary objective.
Beyond the ongoing investigation, Olatunji disclosed that the NDPC is working with INEC to improve awareness of data protection obligations among political parties. He expressed concern that many political organisations collect personal information from members and supporters without adequate privacy safeguards.
To address the challenge, the commission plans to provide training on lawful data processing and compliance requirements for political parties ahead of future elections.
The NDPC has also expanded public awareness efforts by translating the Nigeria Data Protection Act into major Nigerian languages, making it easier for citizens across the country to understand their rights and responsibilities under the law.
Olatunji emphasised that protecting personal information is increasingly important in an era of digital governance, arguing that trust in public institutions depends largely on how securely they handle citizens’ data.
He added that strengthening privacy compliance across government agencies, financial institutions and telecommunications companies remains essential to national security and public confidence.
