The Socio-Economic Rights and Accountability Project (SERAP) has urged President Bola Tinubu to direct the Nigeria Data Protection Commission (NDPC) to investigate suspected AI-generated photographs and other questionable records in the preliminary voters' register released by the Independent National Electoral Commission (INEC).
The organisation wants the investigation to establish whether Nigerians' personal data were unlawfully accessed, altered or manipulated and whether the alleged irregularities constitute a breach of the Nigeria Data Protection Act 2023.
SERAP Calls for Independent Investigation
In a letter dated October 31, 2026, and signed by its Deputy Director, Kolawole Oluwadare, SERAP asked Tinubu to ensure that NDPC Chief Executive Officer, Vincent Olatunji, investigates the matter.
The organisation said the investigation should identify the nature and extent of the irregularities, determine who was responsible and establish how the questionable records entered the electoral database.
It also called for an independent forensic examination of INEC's affected systems and database, particularly amid concerns about the possible misuse of authorised access credentials by voter registration officers.
SERAP warned that any unlawful alteration or compromise of personal information could undermine confidence in the electoral process and expose eligible voters to wrongful exclusion ahead of the 2027 general elections.
INEC Acknowledges Questionable Records
The demand follows INEC's acknowledgement of public concerns over suspected AI-generated photographs in its preliminary Register of Voters.
During the nationwide physical display of the register from October 9 to 15, 2026, the commission said several questionable registration records were identified and flagged for further examination.
In a statement issued on October 27, INEC said it had commenced a review and was taking corrective measures. It also noted that the online version of the preliminary register did not reflect all ongoing data-cleanup activities.
The commission maintained that the register was not yet final and that verification, adjudication and data-cleanup processes would be completed before the final certified register is released on December 15, 2026.
Data Protection Law and Voters' Rights
SERAP cited provisions of the Nigeria Data Protection Act 2023, particularly Sections 24 and 39, which require personal data to be processed accurately and securely and protected against unauthorised access or alteration.
It also referenced Section 40, which requires data controllers to notify the NDPC of certain personal data breaches within 72 hours of becoming aware of them.
The organisation urged the commission to determine whether INEC complied with its legal obligations and whether the incidents amount to a reportable data breach under the law.
It further called for affected Nigerians to be given accessible opportunities to verify and correct their voter information without being unfairly excluded from the electoral process.
Seven-Day Deadline Issued
SERAP urged Tinubu to ensure that the requested investigation and other measures are initiated within seven days of receiving or being notified of its letter.
The organisation also called on the NDPC to publish its findings and recommendations, subject to lawful protections, and ensure accountability if wrongdoing is established.
It warned that failure to address the matter could prompt legal action and other lawful measures to compel the relevant authorities to act.
SERAP maintained that the reported irregularities must be independently investigated and resolved before the final voters' register is certified, stressing that Nigerians must be able to trust the accuracy and security of the database ahead of the 2027 elections.
Channels Television
