Nigeria Updates Data Privacy Framework to Include AI Governance
The National Data Protection Commission (NDPC) of Nigeria announced plans to review the Nigeria Data Protection Act (NDPA) 2023. The update will specifically address emerging technologies like artificial intelligence, robotics, and advanced computing.
Speaking at a commemoration event marking three years since President Bola Tinubu signed the NDPA into law on June 12, 2023, National Commissioner Dr. Vincent Olatunji explained that technology advancements necessitate this review.
“We’re in an era of rapid technological change,” Dr. Olatunji stated. “When the Act was drafted, we could only make general references to emerging technologies. Now, we need to be more specific and provide examples as these technologies continue to evolve.”
The NDPC boss highlighted that AI has become central to digital transformation since the original Act’s creation, requiring a more targeted regulatory approach.
Key Focus Areas of Review
- Moving from vague references to emerging tech towards specific provisions
- Addressing data privacy in contexts like digital footprints and biometric information
- Ensuring human oversight remains central to AI deployments
- Periodically updating the framework to prevent obsolescence
The NDPA already repealed the older Nigeria Data Protection Regulations (NDPR) of 2019, establishing a comprehensive legal foundation for safeguarding personal data in Nigeria.
Implications for Businesses and Residents
This review signals Nigeria’s commitment to maintaining a modern data protection framework that aligns with global standards. As compliance becomes increasingly essential rather than optional, businesses operating in the country should prepare for more specific regulations around emerging technologies.
With these updates, Nigeria aims to strengthen its position as a digital economy ready to attract international investment while ensuring the rights and interests of residents are adequately protected.