SERAP SEEKS PROBE OF SUSPECTED AI-GENERATED PHOTOS IN INEC VOTER REGISTER

The Socio-Economic Rights and Accountability Project (SERAP) has called on President Bola Tinubu to order an independent investigation into suspected artificial intelligence-generated photographs and irregular registration details discovered in the preliminary voters’ register released by the Independent National Electoral Commission (INEC).

The organisation wants Tinubu to direct the National Commissioner and Chief Executive Officer of the Nigeria Data Protection Commission (NDPC), Vincent Olatunji, to investigate possible unauthorised access, alteration or manipulation of citizens’ personal information and determine whether INEC violated the Nigeria Data Protection Act 2023.

The demand follows INEC’s admission that questionable registration entries and suspected AI-generated photographs were discovered during the nationwide display of the preliminary voters’ register held between October 9 and 15, 2026.

In a letter dated October 31, 2026, and signed by its Deputy Director, Kolawole Oluwadare, SERAP urged the President to ensure that the NDPC establishes the scale of the irregularities, identifies those responsible and provides affected Nigerians with an opportunity to verify and correct their details without being denied their voting rights.

SERAP described the development as a serious threat to the security of citizens’ personal information and the credibility of the voters’ register ahead of the 2027 general elections.

The organisation stressed that Nigerians must be protected from unauthorised changes to their personal records, warning that any compromise of the electoral database could weaken public confidence in the election process.

It argued that INEC’s acknowledgement of suspicious photographs and questionable registration records made an independent investigation by the data protection regulator necessary.

SERAP consequently called for a forensic examination of the affected database and related systems to establish whether personal information had been accessed or modified unlawfully.

It also asked the NDPC to determine whether the incident amounted to a personal data breach under Section 65 of the Nigeria Data Protection Act and whether the electoral commission fulfilled its legal obligations on breach notification and record-keeping.

The organisation further wants investigators to establish the number of affected records, their geographical spread, when the irregularities occurred, how they happened and the individuals or institutions responsible.

It also raised concerns over the possible misuse of authorised access credentials by voter registration officials and potential lapses in the measures designed to safeguard the accuracy and security of INEC's database.

According to SERAP, an internal investigation by INEC would not replace the independent regulatory responsibility of the NDPC.

The organisation warned that any manipulation of the database could compromise the reliability of the voters’ register and expose eligible Nigerians to wrongful exclusion from the electoral process.

It therefore called for stronger security measures and an accessible correction process to enable affected citizens to authenticate their information and rectify any errors before the final register is approved.

SERAP also urged the data protection commission to make its investigation findings and recommendations public, subject to lawful confidentiality requirements, and ensure that those found responsible are held accountable.

INEC had, in a statement issued on October 27, 2026, acknowledged concerns surrounding suspected AI-generated photographs contained in the preliminary voters’ register uploaded to its website.

The commission explained that questionable registration entries were identified and flagged for further scrutiny during the physical display of the register across the country from October 9 to 15.

It said a review had commenced, alongside corrective measures, while investigations were ongoing to establish the circumstances surrounding the suspicious photographs and possible technical or procedural shortcomings.

INEC, however, clarified that the online version of the preliminary register did not capture all the data-cleaning exercises being undertaken by the commission.

It maintained that the document was not the final certified voters’ register, adding that verification, adjudication and other necessary corrections would be completed before the final register is certified on December 15, 2026.

To support its demand, SERAP referenced Sections 24 and 39 of the Nigeria Data Protection Act, which establish requirements for accurate and secure processing of personal information and protection against unauthorised access, alteration or loss.

It also cited Section 40, which requires data controllers to notify the NDPC of certain personal data breaches within 72 hours of becoming aware of them.

The organisation further invoked Section 37 of the Nigerian Constitution, which guarantees the right to privacy, alongside provisions of the African Charter on Human and Peoples’ Rights and the International Covenant on Civil and Political Rights that protect citizens’ rights to participate in government and vote in genuine elections.

SERAP gave Tinubu seven days from the receipt or publication of its letter to ensure that the requested action was taken.

It warned that failure to receive a response within the stipulated period could compel it to pursue legal action and other lawful measures to ensure compliance by the Federal Government, NDPC, INEC and other relevant authorities.

The organisation maintained that the irregularities must be thoroughly investigated and resolved before the final voters’ register is certified, insisting that Nigerians deserve an electoral database that is accurate, secure and free from manipulation ahead of the 2027 general elections.