Vincent Olatunji, PhD., the National Commissioner and Chief Executive Officer, Nigeria Data Protection Bureau (NDPB
Vincent Olatunji, PhD., the National Commissioner and Chief Executive Officer, Nigeria Data Protection Bureau (NDPB

NDPC joins 60 global regulators to endorse AI imagery privacy protection 

The Nigeria Data Protection Commission (NDPC) has joined over 60 Data Protection Authorities worldwide in endorsing the “Joint Statement on AI-Generated Imagery and the Protection of Privacy,” a move aimed at strengthening global safeguards against the misuse of artificial intelligence technologies.

The endorsement was disclosed in a statement signed by the Commission’s Head of Legal, Enforcement and Regulations, Babatunde Bamigboye, who noted that the action reflects Nigeria’s growing alignment with international efforts to address emerging privacy risks linked to artificial intelligence.

According to the Commission, the joint statement was coordinated by the Global Privacy Assembly through its International Enforcement Cooperation Working Group. It highlights rising concerns over AI systems capable of generating highly realistic images and videos of identifiable individuals.

The NDPC said the endorsement underscores the urgent need for stronger regulatory vigilance as generative AI tools become increasingly sophisticated and widely accessible.

“The Joint Statement highlights concerns over the misuse of AI-powered tools to create non-consensual imagery, defamatory content and other harmful materials, particularly affecting children and vulnerable groups,” the Commission said.

It added that the statement calls on organisations to introduce robust safeguards, ensure transparency, provide effective mechanisms for the removal of harmful content and fully comply with existing data protection laws.

The Commission further explained that its endorsement forms part of Nigeria’s broader efforts to promote the responsible development and deployment of artificial intelligence technologies.

To reinforce compliance, the National Commissioner and Chief Executive Officer of the NDPC, Vincent Olatunji, has directed that Compliance Audit Returns under the Nigeria Data Protection Act will serve as a benchmark for evaluating responsible AI use in data processing activities.

Under the directive, data controllers and processors classified as being of major importance will be required to demonstrate, through audit submissions, that AI-driven data processing operations comply strictly with the provisions of the Act.

Regulators globally have expressed growing concerns that the increasing realism of AI-generated images and videos has complicated enforcement, particularly in cases involving impersonation, deepfakes and identity manipulation.

Nigeria’s current effort also aligns with broader national initiatives to regulate AI development. The Minister of Communications, Innovation and Digital Economy, Bosun Tijani, recently led efforts to develop the country’s National AI Strategy.

The NDPC also issued the General Application and Implementation Directive (GAID), which mandates privacy-by-design and privacy-by-default principles in the development and deployment of AI tools.

Meanwhile, the Commission disclosed that it launched an investigation in February into the Chinese e-commerce platform Temu over concerns that the personal data of millions of Nigerians may have been improperly handled.

According to the NDPC, the probe was triggered by concerns relating to online surveillance, transparency, accountability, data minimisation, duty of care and cross-border data transfers.

“Preliminary investigations indicate that Temu is an e-commerce platform which processes personal information of approximately 12.7 million data subjects in Nigeria with 70 million daily active users globally,” the Commission stated.

The regulator added that the scale of data collection raises significant questions about compliance with Nigeria’s data protection and privacy standards.