Nigeria’s lawmakers are moving to reassess the National Data Protection Act (2023) amid growing concerns about the impact of rapidly changing technologies such as Artificial Intelligence and increasingly sophisticated global cybercrime systems.
This development was highlighted in Abuja during a three-day Data Protection Awareness Workshop for the Joint National Assembly Committee on ICT.
The session, organised by the Nigeria Data Protection Commission (NDPC) in partnership with Ampersand Development Partners, aims to strengthen legislative understanding of emerging digital risks and governance needs.
The Chairman of the Senate Committee on ICT and Cyber Security, Afolabi Salisu, said the review of the law is becoming unavoidable. He stated: “The review of the law is becoming unavoidable due to rapid global shifts in data governance, particularly developments in AI systems and international cybersecurity instruments such as the United Nations Convention on Cybercrime.”
He stressed that data protection and cybercrime are now deeply connected, adding: “Data protection and cybercrime are now deeply connected, making legal updates essential to safeguard national interests in the digital era.”
According to him, lawmakers must improve their technical understanding of data privacy issues, noting that Legislation in such a fast-evolving field cannot succeed without a clear grasp of how digital and data systems operate.
He also added that the workshop is expected to help lawmakers assess implementation of the 2023 Act, stating: “This engagement is expected to help lawmakers evaluate how well the 2023 Act has performed so far and how it aligns with global standards.”
He warned citizens about everyday digital risks, noting that many widely used free services, including mobile apps and public Wi-Fi networks, often trade access for the collection of personal data.
On the House side, the Chairman of the Committee on ICT and Cyber Security, Stanley Olajide, described data as a strategic national resource that could shape Nigeria’s economic future more than traditional commodities like oil.
He argued that strengthening legal protections is necessary to secure Nigeria’s digital assets and ensure accountability when breaches occur.
He further noted that leading economies, such as the United States, have already established robust data governance systems to protect national interests in digital transactions and cloud-based services.
In his view, any data generated or hosted within Nigeria should be firmly covered by local laws to prevent misuse and reinforce sovereignty over digital resources.
Stakeholders at the workshop emphasised that the review process would also help Nigeria build a clearer roadmap for digital governance and cyber resilience in an era shaped by artificial intelligence and cross-border data flows.
They noted that stronger collaboration between lawmakers, regulators and industry players would be key to ensuring that future amendments to the Act remain responsive to emerging threats and international best practices.
The engagement was also described as part of ongoing efforts to strengthen institutional capacity to safeguard Nigeria’s growing digital economy and protect citizens’ data rights, as well as the long-term national digital security framework.
