Revisiting Nigeria’s Data Protection Law: Adapting to the Age of AI and Emerging Technologies

Three years after the enactment of the Nigeria Data Protection Act (NDPA), the Nigeria Data Protection Commission (NDPC) has announced intentions to update the legislation to explicitly incorporate advancements in technologies such as artificial intelligence (AI), big data analytics, and robotics. This move reflects the need to keep pace with the rapidly evolving digital landscape.

Why the Update is Crucial

Dr. Vincent Olatunji, National Commissioner of the NDPC, highlighted during a recent event in Abuja that the original NDPA, signed into law on June 12, 2023, was drafted when digital technologies were less sophisticated. Consequently, the Act’s references to emerging technologies were broad and nonspecific, lacking detailed provisions for innovations now central to the digital economy.

“At the time of drafting, we could only allude generally to emerging technologies. Today, however, we can pinpoint specific technologies like AI, robotics, and big data that are transforming industries and society,” Dr. Olatunji explained. He emphasized that a decade ago, AI was not a mainstream topic, but it now underpins many facets of digital transformation worldwide.

Focusing on Specific Technologies and Human Oversight

The NDPC aims to refine the NDPA by explicitly naming and regulating these key technologies, ensuring the law remains relevant and effective. However, Dr. Olatunji stressed the importance of maintaining human judgment in AI deployment, cautioning against over-reliance on automated systems.

“While AI offers tremendous benefits, human oversight remains indispensable. We must avoid delegating all decision-making to machines,” he noted. Additionally, the Commission is prioritizing ongoing regulation of digital footprints and privacy concerns, recognizing that these areas require vigilant monitoring as technology advances.

Nigeria’s Progressive Regulatory Approach

Unlike many countries still governed by decade-old data protection laws, Nigeria is committed to periodic reviews of its data privacy framework. This proactive stance aims to prevent the NDPA from becoming obsolete amid fast-paced technological innovation.

Dr. Olatunji expressed confidence in the future of Nigeria’s data privacy ecosystem, forecasting significant growth in awareness, compliance, and trust over the next five years. “We are cultivating a privacy-conscious culture that will attract investors and digital enterprises, ensuring the rights and freedoms of Nigerians and residents are safeguarded,” he said.

Economic Impact and Industry Growth

Recent data from the NDPC reveals that Nigeria’s data protection sector has blossomed into a N16.2 billion industry within just two years of formal regulatory enforcement. This expansion reflects heightened adherence to data protection standards, stronger regulatory enforcement, and increased confidence in Nigeria’s digital governance.

Dr. Olatunji shared these insights during a media workshop in Lagos, underscoring that while revenue generation is not the NDPC’s primary goal, the sector’s growth signals a maturing digital economy ready to embrace global standards.

Key Takeaways for Stakeholders

• The NDPA is set for revision to explicitly address AI, robotics, and big data, ensuring legal clarity and relevance.
• Human oversight remains a cornerstone in the ethical deployment of AI technologies.
• Nigeria’s commitment to regular legislative updates distinguishes it as a forward-thinking digital economy.
• The data protection industry is rapidly expanding, reflecting increased compliance and trust.
• Building a robust privacy culture is essential for attracting investment and protecting citizens’ rights.

As Nigeria continues to adapt its data protection framework, these developments position the country as a competitive player in the global digital economy, ready to harness the benefits of emerging technologies while safeguarding privacy and security.