The Nigeria Data Protection Commission (NDPC) has commenced an investigation into the alleged leak of voter information belonging to Nollywood actor and politician Emeka Ike amid growing concerns over data privacy and electoral integrity.
The National Commissioner and Chief Executive Officer of the NDPC, Dr. Vincent Olatunji, disclosed this on Friday during a media parley with journalists at the commission’s headquarters in Abuja, stating that both the Independent National Electoral Commission (INEC) and Ike had already been engaged as part of the ongoing probe.
The controversy arose following the publication of details linked to Ike’s voter registration record by Lere Olayinka, Senior Special Assistant on Information to the Minister of the Federal Capital Territory, Nyesom Wike.
Ike, an indigene of Imo State, contested the House of Representatives seat for the AMAC/Bwari Federal Constituency in the FCT under the platform of the Nigerian Democratic Congress but was unsuccessful.
In a social media post, Olayinka claimed that Ike had only transferred his voter registration from Imo State to the FCT on May 15, 2026, attaching screenshots that allegedly showed information from an INEC administrative portal. The images reportedly contained personal details including Ike’s application number, registration centre, Voter Identification Number, profile photograph, name, and date of application.
The publication triggered widespread criticism and raised concerns about possible unauthorised access to INEC’s voter database.
Responding to the controversy, INEC denied reports of a major cyber breach, insisting that the incident resulted from the misuse of valid internal credentials by authorised personnel rather than an external attack on its Continuous Voter Registration database.
Meanwhile, operatives of the Force Intelligence Department–Intelligence Response Team have reportedly questioned Olayinka and an electoral officer as part of ongoing investigations into the alleged disclosure of voter information.
Speaking on the matter, Olatunji said the NDPC was treating the case as a priority due to its implications for public confidence in Nigeria’s electoral system.
“Emeka Ike is downstairs now. INEC, they were here last week, and they were here this week again,” he said.
According to him, the commission follows established procedures in handling data breach allegations and does not rely solely on information circulating on social media.
“The one in INEC is really sensitive because we are moving towards elections. And it speaks to the credibility of the database. It’s of utmost urgency, and we are moving immediately,” Olatunji stated.
He explained that investigations in the privacy sector require diligence, evidence, and adherence to due process, stressing that every reported breach receives attention from the commission.
“There is no breach reported to us that we have not acted on, either in a government institution or public institution,” he said.
Olatunji noted that the commission assesses complaints based on factors such as the sensitivity of the information involved, the number of people affected, the credibility of the claims, and the likely impact on data subjects.
He added that the NDPC no longer publicises every investigation at its inception, preferring to focus on gathering facts before reaching conclusions.
The commissioner maintained that the status of individuals or institutions involved does not influence the commission’s actions.
“No matter who you are, we invite you, and whatever action we are supposed to take, we take,” he said.
He further explained that investigations often extend beyond a specific incident to include a broader assessment of an organisation’s data protection practices, including compliance with registration requirements, audit filings, privacy policies, technical safeguards, and the appointment of data protection officers.
According to Olatunji, organisations that demonstrate substantial compliance are usually encouraged to implement corrective measures rather than face immediate sanctions.
“We don’t issue fines. We issue remediation fees unless and until you are not able to do what is right,” he said.
Beyond the ongoing investigation, the NDPC boss revealed that the commission was working with INEC to strengthen data protection awareness among political parties ahead of future elections.
He expressed concern that many political parties collect large volumes of personal information from members and supporters without adequate privacy safeguards or a proper understanding of their obligations under the Nigerian Data Protection Act.
“A lot of them are collecting data of their party members. What kind of privacy safeguards? What kind of guardrails do they have in place? They don’t even know. That’s the truth,” he said.
Olatunji disclosed that the commission is offering training and awareness programmes for political parties on lawful data processing and compliance requirements.
He also said the NDPC had translated the Nigerian Data Protection Act into major Nigerian languages to improve public understanding of privacy rights across the country.
Emphasising the importance of data protection, Olatunji described privacy compliance as a key component of national security and public trust, particularly as elections become increasingly digital.
“There is no digital economy without trust. There is no public security without trust. Trust is not about what you say. It is about what you do,” he said.
He reiterated the commission’s commitment to working with public and private institutions to strengthen compliance and ensure the protection of Nigerians’ personal information.
