NDPC Plans Review of Nigeria Data Protection Act for AI

In Short

• The Nigeria Data Protection Commission, NDPC, says it will review the Nigeria Data Protection Act, NDPA.
• The review is meant to explicitly cover artificial intelligence, big data, and robotics.
• NDPC says it wants the law to stay current as Nigeria’s digital economy grows.

What Happened

The Nigeria Data Protection Commission, NDPC, says it plans to review the Nigeria Data Protection Act to better address AI, big data, and robotics.

NDPC’s National Commissioner, Dr Vincent Olatunji, shared the update in Abuja while marking three years since the NDPA was signed into law on June 12, 2023.

Olatunji said the law was written when the digital landscape was less advanced. Because of that, references to emerging technologies were broad. He said the next review should name technologies like artificial intelligence directly and give clearer examples.

He also stressed that human oversight should remain central when AI systems are used. In plain terms, companies should not let automated decisions run without people checking the outcomes, especially where personal data is involved.

NDPC also flagged digital footprints, meaning the traces people leave online like device IDs, location data, and browsing activity, as an area that needs ongoing regulatory attention.

Why It Matters

For startups and larger tech firms, clearer NDPA language could change how products are designed and audited. This is especially true for AI tools that use customer data to make predictions, score users, or automate decisions.

For compliance teams, a more specific law may mean tighter rules on data collection, model training datasets, and accountability when automated systems cause harm.

For investors, regular legal updates can reduce uncertainty. NDPC said Nigeria’s habit of periodically reviewing its data protection law is different from countries still operating under older privacy laws.

The review also lands as Nigeria’s data protection sector grows. NDPC previously estimated the local data protection industry at ₦16.2 billion, pointing to a growing market for privacy, governance, and security services.