The Nigeria Data Protection Commission (NDPC) has announced plans to review the Nigeria Data Protection Act (NDPA) to explicitly address emerging technologies such as artificial intelligence, robotics and big data.
National Commissioner of the NDPC, Vincent Olatunji, disclosed the plan in Abuja on Friday during activities marking three years since the Nigeria Data Protection Act was signed into law.
According to the News Agency of Nigeria, Olatunji said rapid advancements in digital technology have made parts of the legislation due for review.
He explained that when the law was drafted, emerging technologies were referenced broadly because many of the innovations shaping today’s digital economy had not yet become mainstream.
“We are in the era of emerging technologies. At that time, we could only make general references to emerging technologies, but today we can specifically mention Artificial Intelligence, robotics and big data,” he said.
“Ten years ago, nobody was talking about AI the way we are doing now, but today it has become central to virtually every aspect of digital transformation. We need to be more specific about what constitutes emerging technologies and provide examples because the technologies keep evolving,” he added.
While advocating stronger legal provisions for artificial intelligence, Olatunji stressed that human oversight must remain a critical component of AI deployment.
“We still need the human component. We should not leave everything to artificial intelligence,” he said.
He also highlighted concerns around digital footprints, privacy and data governance, noting that regulators must continuously adapt to technological developments.
According to Olatunji, Nigeria’s commitment to periodically reviewing its data protection framework distinguishes it from some countries that continue to rely on legislation enacted more than a decade ago.
He said regular reviews would help ensure that the law remains relevant as new technologies emerge.
Looking ahead, the NDPC chief expressed confidence in the future of Nigeria’s data protection ecosystem, predicting greater awareness, compliance and trust among citizens, businesses and investors.
“I see growth, development, awareness and greater trust in the ecosystem. Compliance will become a necessity rather than an option,” he said.
“We are building a culture of privacy that will make investors and other stakeholders see Nigeria as a country that is ready for digital business. The rights, freedoms and interests of Nigerians and legal residents will be adequately protected,” he added.
The Nigeria Data Protection Act was signed into law on June 12, 2023, establishing a legal framework for the protection of personal data and privacy rights in the country.
