SERAP Urges Tinubu to Order Independent Probe into Suspected AI-Generated Voter Register Entries
The Socio-Economic Rights and Accountability Project (SERAP) has called on President Bola Tinubu to direct the Nigeria Data Protection Commission (NDPC) to launch an independent investigation into suspected artificial intelligence-generated photographs, alleged alterations of personal information and other questionable entries discovered in the preliminary Register of Voters released by the Independent National Electoral Commission (INEC).
SERAP made the request in a letter dated October 31, 2026, signed by its Deputy Director, Kolawole Oluwadare. The organisation’s demand followed INEC’s acknowledgement that suspicious registration records, including photographs suspected to have been generated using artificial intelligence, were discovered in the preliminary voter register.
The organisation urged President Tinubu to instruct the NDPC’s National Commissioner and Chief Executive Officer, Dr Vincent Olatunji, to carry out a prompt, comprehensive, independent and effective investigation into the circumstances surrounding the questionable records.
According to SERAP, the investigation should determine the nature and extent of the irregularities, establish whether any personal data breach occurred under the Nigeria Data Protection Act 2023, identify those responsible and ensure that affected Nigerians can verify and correct their information without being unfairly excluded from the electoral process.
SERAP expressed concern that the reported irregularities could threaten the security of Nigerians’ personal information and undermine confidence in the voter register ahead of the 2027 general elections.
The organisation stressed that citizens should not have to fear that their personal information could be manipulated, altered or accessed without adequate security measures.
The intervention followed an October 27 statement by INEC, in which the electoral commission acknowledged public concerns over suspected AI-generated photographs appearing in the preliminary Register of Voters.
INEC explained that questionable registration records were identified and flagged for further investigation during the nationwide physical display of the preliminary register, which took place between October 9 and 15.
The commission said it had begun reviewing the affected records and taking corrective steps while investigating how the suspicious photographs entered the register, including the possibility of technical or procedural failures.
INEC further clarified that the version made available online represented the original preliminary register and did not include all the data-cleanup exercises already being undertaken.
It also emphasised that the document was not the final certified Register of Voters. According to the commission, verification, adjudication and data-cleanup processes would be completed before the final register is certified on December 15, 2026.
However, SERAP maintained that INEC’s internal review should not be considered a substitute for an independent investigation by the NDPC, given the commission’s statutory responsibility to protect personal data.
The organisation argued that an independent investigation was necessary to establish what happened, determine whether any laws were violated and identify measures required to prevent similar incidents.
SERAP therefore called for an independent forensic examination of INEC’s affected databases and systems to establish whether voters’ personal information had been unlawfully accessed, altered or processed and whether the electoral commission complied with the provisions of the Nigeria Data Protection Act 2023.
It said the investigation should determine the total number of affected records, their geographical distribution, when and how the questionable entries were created or modified, and the individuals or institutions responsible.
The organisation also raised concerns over reports suggesting that authorised access credentials may have been used in connection with some of the irregular records.
SERAP explained that the use of authorised login credentials would not automatically make the subsequent access to or processing of voter information lawful, particularly if such activities exceeded the authority granted to the individuals involved.
It urged the NDPC to determine whether the reported incidents constituted a personal data breach under Section 65 of the Nigeria Data Protection Act 2023 and whether the relevant notification and record-keeping obligations were fulfilled.
The organisation also referenced Sections 24 and 39 of the Act, which address the accurate and secure processing of personal data, alongside Section 40, which requires notification to the NDPC when a personal data breach is likely to pose risks to individuals’ rights and freedoms.
Where violations are established, SERAP called for appropriate corrective measures, improved security systems and accessible procedures that would allow affected voters to verify and correct their information without facing wrongful exclusion.
It further urged the NDPC to make its investigation findings and recommendations public, subject to lawful restrictions, and ensure that anyone found responsible is held accountable.
SERAP linked the accuracy and integrity of the voter register to Nigerians’ constitutional rights to privacy and political participation. It cited Section 37 of the 1999 Constitution, Article 13 of the African Charter on Human and Peoples’ Rights and Article 25 of the International Covenant on Civil and Political Rights.
The organisation maintained that an accurate and reliable voter register is essential to ensuring that Nigerians can effectively exercise their rights to participate in public affairs and vote in genuine elections.
It warned that unlawful manipulation or alteration of voters’ personal information could weaken public confidence in the electoral process and place eligible citizens at risk of being wrongly excluded from voting.
SERAP consequently gave President Tinubu seven days from the receipt or publication of its letter to implement the requested measures.
The organisation warned that failure to receive a response within the stipulated period could prompt it to pursue appropriate legal action and other lawful measures.
SERAP maintained that the reported irregularities must be independently investigated and addressed before INEC certifies the final Register of Voters.
It stressed that Nigerians must have confidence that the register to be used for the 2027 general elections is accurate, reliable and sufficiently protected against unauthorised access, alteration and manipulation.
