The Socio-Economic Rights and Accountability Project (SERAP) has given President Bola Tinubu a seven-day ultimatum to order an independent investigation into suspected artificial intelligence (AI)-generated photographs and alleged manipulation of personal data in the Independent National Electoral Commission (INEC) preliminary Register of Voters.
SERAP wants Tinubu to direct the National Data Protection Commission (NDPC) to investigate the reported irregularities, determine whether they violate the Nigeria Data Protection Act 2023 and identify those responsible.
In a letter dated October 31, 2026, and signed by its Deputy Director, Kolawole Oluwadare, the organisation warned that the allegations raise serious concerns about the protection of Nigerians’ personal information and the credibility of the voter register.
SERAP said the NDPC must exercise its statutory powers independently and without delay, stressing that INEC’s internal investigation cannot replace an independent data-protection inquiry.
The organisation warned that it would consider legal action and other lawful measures against the Federal Government, NDPC, INEC and other relevant authorities if its demands were not addressed within seven days of receiving or publishing the letter.
The demand followed concerns raised during INEC’s nationwide display of the preliminary Register of Voters between October 9 and 15, 2026.
Some Nigerians reportedly identified suspicious photographs, including images suspected to have been generated using artificial intelligence, alongside questionable registration records.
In a statement issued on October 27, INEC acknowledged that questionable registration records had been identified and flagged for further examination.
The commission also recognised concerns surrounding suspected AI-generated photographs published on its website.
According to SERAP, INEC said it had commenced an internal review and was taking corrective measures while investigating possible technical and procedural failures responsible for the irregularities.
The electoral commission reportedly maintained that the online publication did not reflect all ongoing data-cleanup activities and emphasised that the preliminary register was not the final certified document.
INEC is expected to complete its verification, adjudication and data-cleanup exercises before certifying the final Register of Voters on December 15, 2026.
However, SERAP insists that an independent investigation by the NDPC is necessary to establish the full circumstances surrounding the suspected irregularities.
The organisation called for a comprehensive forensic examination of INEC’s voter database and information technology systems to determine whether Nigerians’ personal information had been unlawfully accessed, altered or manipulated.
It also wants investigators to establish the number and geographical distribution of affected registration records, determine when and how the questionable entries were created or modified, and identify the individuals or institutions responsible.
SERAP expressed concern that the incidents could involve unauthorised access to personal information, misuse of official access credentials and inadequate safeguards against data manipulation.
The organisation further urged the NDPC to determine whether the incidents constitute personal data breaches under Section 65 of the Nigeria Data Protection Act 2023.
It also wants the commission to establish whether INEC fulfilled its statutory obligations concerning data-breach notifications, documentation and record-keeping.
Beyond investigating the allegations, SERAP called for stronger security measures and accessible procedures that would enable affected Nigerians to verify and correct their voter registration information.
It warned that eligible voters must not be disenfranchised because of errors, unauthorised alterations or suspicious entries in the electoral database.
The organisation also urged the NDPC to publish its investigation findings and recommendations, subject to applicable legal protections, and ensure that anyone found responsible is held accountable.
SERAP cited Section 37 of the Nigerian Constitution, which guarantees the right to privacy, alongside Article 13 of the African Charter on Human and Peoples’ Rights and Article 25 of the International Covenant on Civil and Political Rights.
These legal provisions protect citizens’ privacy and their rights to participate in government and vote in genuine elections.
The organisation warned that any compromise of the voter register could undermine public confidence in INEC, threaten the accuracy of electoral records and expose eligible Nigerians to wrongful exclusion.
With the 2027 general elections approaching, SERAP maintained that the integrity of the voters’ register must be protected before INEC completes its final certification.
It argued that investigating the reported irregularities, identifying those responsible and correcting affected records are essential to safeguarding Nigerians’ democratic rights and ensuring confidence in the country’s electoral process.
