Nigeria Poised to Fortify Data Protection Act Against AI, Robotics Surge
The Nigeria Data Protection Commission (NDPC) is initiating a comprehensive review of the Nigeria Data Protection Act (NDPA) 2023, signalling a proactive approach to integrate emerging technologies like Artificial Intelligence (AI), robotics, and big data into the nation’s regulatory framework. This strategic move aims to ensure Nigeria’s data protection landscape remains robust and relevant amidst accelerating technological advancements.
The National Commissioner and Chief Executive Officer of the NDPC, Dr. Vincent Olatunji, announced these plans in Abuja, highlighting the imperative to adapt the Act to the realities of the current technology-driven environment. Speaking during the third anniversary of President Bola Tinubu’s signing of the NDPA into law on June 12, 2023, Dr. Olatunji explained that the initial drafting of the legislation predated the widespread proliferation and sophistication of many technologies now central to the global digital economy. Consequently, the Act’s provisions, while forward-looking, contained broad references rather than specific mandates for these rapidly evolving fields.
Dr. Olatunji emphasised the need for the law to move beyond generic classifications and explicitly address technologies that are now critical drivers of economic and social development. “We are in the era of emerging technologies,” he stated. “At the time the law was drafted, we could only make broad references to emerging technologies, but today we can specifically mention Artificial Intelligence, robotics, and big data.” He further noted that the exponential growth of AI in recent years has fundamentally reshaped the digital landscape, presenting novel regulatory challenges that necessitate more precise legal guidance. “Ten years ago, discussions around Artificial Intelligence were not as widespread as they are today. Now, AI has become central to digital transformation across virtually every sector. We need to be more specific about what constitutes emerging technologies and provide clear examples because technology continues to evolve,” he added.
While advocating for strengthened legal provisions concerning AI and related technologies, Dr. Olatunji underscored the indispensable role of human judgment and oversight in the deployment and governance of AI systems. He stressed that technology should serve as a complement to, rather than a replacement for, human decision-making. “We still need the human component. We should not leave everything to artificial intelligence,” he asserted.
The NDPC chief also drew attention to ongoing concerns surrounding digital footprints, privacy rights, and data security, underscoring the commission’s commitment to remaining vigilant against emerging threats posed by technological innovation. The commission will continue to monitor global developments and conduct periodic reviews of Nigeria’s data protection framework to ensure its sustained relevance and effectiveness. Dr. Olatunji highlighted that Nigeria’s dedication to regular legislative reviews distinguishes it from many jurisdictions still operating under laws enacted over a decade ago with minimal updates, thereby preventing the legislation from becoming obsolete in the face of rapidly changing digital realities. “We will continue to review the Act from time to time because technology is evolving very fast, and the law must evolve with it,” he affirmed.
Looking ahead, Dr. Olatunji expressed optimism regarding the future of Nigeria’s data privacy ecosystem, projecting significant advancements in compliance, awareness, and investor confidence over the next five years. “I see growth, development, awareness, and greater trust in the ecosystem. Compliance will become a necessity rather than an option,” he stated. He further elaborated that the commission is actively laying the groundwork for a robust privacy culture, positioning Nigeria as an attractive destination for digital investment and innovation. “We are building a culture of privacy that will encourage investors and other stakeholders to see Nigeria as a country that is ready for digital business. The rights, freedoms, and interests of Nigerians and legal residents will continue to be protected,” he concluded. The Nigeria Data Protection Act, enacted in June 2023, established a comprehensive legal framework for the protection of personal data, privacy rights, and responsible data processing across both public and private sectors.
