Nigeria’s data protection regulator is moving to strengthen the country’s digital governance framework through a comprehensive review of its flagship legislation. The Nigeria Data Protection Commission announced plans Friday to update the Nigeria Data Protection Act to specifically address the rapid emergence of artificial intelligence, robotics and advanced computing technologies reshaping Nigeria’s economy.
The announcement came during a commemoration marking three years since President Bola Tinubu signed the NDPA into law on June 12, 2023. Speaking in Abuja, NDPC National Commissioner Dr. Vincent Olatunji explained that while the original Act provides a solid foundation for data protection, the technology landscape has evolved dramatically since the legislation was drafted, rendering some provisions outdated.
READ ALSO:Anambra Invests N80 Million Into 80 Startups, Trains 400 Tech Professionals
When lawmakers crafted the NDPA, the digital ecosystem was less mature, which prevented them from adequately addressing many emerging technologies now central to business operations and innovation. The Act consequently included broader, more general language rather than specific provisions tailored to today’s technological realities. Olatunji highlighted this gap directly, noting that artificial intelligence was not a widespread concern a decade ago but has now become fundamental to digital transformation across virtually every sector.
The core challenge lies in how the Act currently treats emerging technologies. The legislation makes only vague references to innovation and advanced systems, leaving regulators and organizations uncertain about exact compliance requirements. The planned review seeks to replace this broad language with specific, targeted provisions that explicitly address AI, robotics and other evolving technologies. However, regulators must also account for the fact that new innovations will continue emerging, requiring a framework flexible enough to accommodate future developments without constant legislative overhauls.
Olatunji emphasized that human oversight must remain central to how Nigeria deploys AI systems going forward. As organizations increasingly automate decision-making processes, the NDPC is insisting that human judgment and control cannot be entirely removed from critical determinations. This reflects growing global concern about algorithmic bias and the risks of fully automated systems, particularly in sensitive areas like financial services, healthcare and government administration.
Beyond AI, the NDPC identified digital footprints and privacy-related contexts as additional areas requiring continuous regulatory attention. As Nigerians generate larger volumes of personal data across more platforms and services, the commission recognizes that data protection cannot be a static exercise but must evolve with usage patterns and technological capabilities.
The commissioner projected confidence in Nigeria’s data protection ecosystem, forecasting significant growth over the next five years through increased awareness, stronger compliance and greater public trust. He noted that Nigeria’s commitment to periodic legislative review distinguishes it from many global counterparts still operating under frameworks enacted over a decade ago with minimal updates. Regular reviews prevent laws from becoming obsolete as technology accelerates.
The NDPC’s proactive approach reflects Nigeria’s broader ambition to position itself as a reliable destination for digital business and investment. By keeping its regulatory framework current, the country is building what Olatunji described as a culture of privacy that assures both domestic residents and international investors that their rights and interests will be adequately protected as the digital economy expands.
