SERAP gives Tinubu 7-day ultimatum to probe AI-generated photos in INEC register

The Socio-Economic Rights and Accountability Project (SERAP) has issued a seven-day ultimatum to President Bola Tinubu, demanding an independent investigation into suspected artificial intelligence-generated photographs found in the preliminary Register of Voters.

The organisation urged the President to direct the National Commissioner of the Nigeria Data Protection Commission (NDPC), Vincent Olatunji, to examine the questionable registration records published by the Independent National Electoral Commission (INEC).

SERAP wants the NDPC to determine whether the personal data of Nigerians were unlawfully accessed or altered.

In a letter dated October 31, 2026, and signed by its Deputy Director, Kolawole Oluwadare, the organisation demanded that the data protection body establish the exact nature, extent, and geographical distribution of the irregularities.

“The reported irregularities raise serious concerns about the security and integrity of Nigerians’ personal data and the reliability of the voter register ahead of the 2027 general elections. The security and accuracy of the voter register are fundamental to the protection of Nigerians’ personal data and their right to participate in public affairs.”

The demand came after INEC’s acceptance of suspicious photographs and registration anomalies, which were flagged during the nationwide physical display of the voter register from October 9 to 15, 2026.

INEC has assured the public that the issues would be resolved before the final Register of Voters is certified on December 15, 2026.

However, SERAP argued that an internal review by INEC cannot substitute for an independent forensic examination by the NDPC.

The group expressed concerns over the possible misuse of authorised access credentials by registration officers.

“Nigerians should not have to worry that their personal information could be altered, manipulated or accessed without proper safeguards…The public needs to know what happened, whether the law was breached and what measures are being taken to prevent a recurrence”.

To back its demands, SERAP cited Section 65 of the Data Protection Act regarding personal data breaches, alongside Sections 24 and 39, which require secure data processing. It also referenced Section 40, which mandates data controllers to report breaches within 72 hours, as well as Section 37 of the Nigerian Constitution guaranteeing the right to privacy.

The civil society organisation also invoked the African Charter on Human and Peoples’ Rights and the International Covenant on Civil and Political Rights, which protect citizens’ rights to participate in genuine elections.

The group warned that if the requested measures were not taken within seven days, it would seek lawful avenues to compel the government, the NDPC, and INEC to act in the public interest.