By Oluwakemi Kindness
The National Assembly has begun moves to reinforce Nigeria’s data protection framework as concerns grow over artificial intelligence (AI), cybercrime, and emerging global digital threats.
Chairman of the Senate Committee on ICT and Cyber Security, Sen. Afolabi Salisu, disclosed this on Tuesday in Abuja during a three-day Data Protection Awareness Workshop organised by the Nigeria Data Protection Commission (NDPC) in collaboration with Ampersand Development Partners for members of the Joint National Assembly Committee on ICT.
Salisu said lawmakers are considering a review of the National Data Protection Act 2023 to align with new technological realities, particularly the rapid rise of AI and evolving global cybercrime trends, including frameworks linked to the United Nations Convention on Cybercrime.
He stressed that data governance and cybersecurity are now deeply interconnected, noting the need for a stronger legal architecture to safeguard Nigeria’s digital space.
According to him, legislators must be properly equipped with technical knowledge to make effective laws in the fast-changing tech environment.
“At the end of this exercise, we hope to develop a clear roadmap and timeline for reviewing the National Data Protection Act,” he said.
He also cautioned Nigerians on the hidden risks of “free” digital services, warning that many mobile applications and public WiFi networks often harvest user data in exchange for access or targeted advertising.
In his remark, Chairman of the House Committee on ICT and Cyber Security, Rep. Stanley Olajide, described data as Nigeria’s “next oil,” stressing that the country’s digital future depends on how well it is protected and regulated.
Olajide said strong data protection laws are critical for attracting foreign investment and building trust in Nigeria’s growing digital economy.
He added that the country must be able to hold both local and foreign entities accountable for data breaches and misuse.
He further noted that while Nigeria already has a legal framework in place, it must be strengthened to meet global standards and ensure that locally generated data is adequately protected within the country’s jurisdiction.
