Aniefiok Christopher
President Bola Tinubu has gotten a seven-day ultimatum to order the Nigeria Data Protection Commission (NDPC) to launch an independent investigation into alleged manipulation of personal data and the appearance of suspected artificial intelligence-generated photographs in the Independent National Electoral Commission’s preliminary Register of Voters.
The Socio-Economic Rights and Accountability Project (SERAP), which issued the ultimatum from November 1, warned that the reported irregularities could compromise the integrity of the voter register, expose Nigerians’ personal information to unauthorised alterations and undermine public confidence in the electoral process ahead of the 2027 general elections.
In a letter dated October 31, 2026, and signed by its Deputy Director, Kolawole Oluwadare, SERAP asked Tinubu to direct the National Commissioner and Chief Executive Officer of the NDPC, Dr Vincent Olatunji, to investigate the circumstances surrounding the questionable registration records.
SERAP specifically called for an examination of the nature and extent of the alleged irregularities, the number of affected records, their geographical distribution, when and how they were created or altered, and the individuals or institutions responsible.
Also read:
- SERAP drags FG to ECOWAS court over N78.8bn cash transfe
- N126bn Electoral Funds: No Hearing Date for SERAP’s Suit Against INEC
- Oil Money: SERAP Sues NNPLC Over ‘Failure to Account for N211trn
The organisation’s demand follows INEC’s acknowledgement of concerns over suspected AI-generated photographs and questionable registration records identified during the nationwide display of the preliminary voter register between October 9 and 15.
According to SERAP, INEC, in a statement issued on October 27, acknowledged that suspicious photographs had appeared in the preliminary register published on its website.
The commission also reportedly disclosed that questionable registration records had been identified and flagged for further examination during the physical display exercise, adding that it had commenced a review and was taking corrective action.
SERAP, however, maintained that INEC’s internal review should not replace an independent investigation by the data protection commission.
It urged the NDPC to conduct a forensic examination of the affected database and systems to establish whether personal data had been unlawfully accessed or altered and determine whether the electoral commission breached provisions of the Nigeria Data Protection Act 2023.
The organisation also asked the commission to establish whether the reported incidents constituted a personal data breach under Section 65 of the Act and whether INEC complied with its notification and record-keeping obligations.
SERAP further called for stronger security safeguards and accessible procedures that would enable affected Nigerians to verify and correct their voter information without being unfairly excluded from the electoral process.
It also demanded the publication of the investigation’s findings and recommendations, subject to lawful protections, and accountability for anyone found responsible for wrongdoing.
The organisation cited Sections 24 and 39 of the Nigeria Data Protection Act, which require personal data to be processed accurately and securely and protected against unlawful alteration, loss or unauthorised access.
It also referenced Section 40, which requires data controllers to notify the NDPC of certain personal data breaches within 72 hours of becoming aware of them.
SERAP warned that the alleged irregularities were particularly concerning because INEC’s voter database contains the personal information of millions of Nigerians and is central to their constitutional and democratic rights.
It argued that any unlawful manipulation of the information could undermine the reliability of the register and expose eligible voters to wrongful exclusion.
The organisation also invoked Section 37 of the Nigerian Constitution, which guarantees the right to privacy, as well as provisions of the African Charter on Human and Peoples’ Rights and the International Covenant on Civil and Political Rights protecting citizens’ rights to participate in public affairs and vote in genuine elections.
Meanwhile, INEC has reportedly maintained that the preliminary register is not the final certified version and that verification, adjudication and data-cleanup processes would be completed before the final Register of Voters is certified on December 15, 2026.
SERAP asked Tinubu to ensure that the requested measures were taken within seven days of receiving or the publication of its letter, warning that it would consider legal action and other lawful measures if the authorities failed to respond.
The organisation said an independent investigation and transparent resolution of the allegations were necessary to protect Nigerians’ personal information and preserve confidence in the voter register ahead of the 2027 elections.
