The National Assembly has commenced moves to review the National Data Protection Act (2023) as Nigeria grapples with rising cyber threats, growing concerns over digital privacy and the rapid evolution of technologies such as Artificial Intelligence.

The Chairman of the Senate Committee on ICT and Cyber Security, Senator Afolabi Salisu (APC, Ogun), disclosed this in Abuja on Tuesday at the opening of a three-day Data Protection Awareness Workshop organised for members of the Joint National Assembly Committee on ICT.

The workshop was facilitated by the Nigeria Data Protection Commission in partnership with Ampersand Development Partners.

Salisu said the planned review of the law became necessary in view of emerging global realities, including advancements in AI systems, increased cross-border cyber threats and new international frameworks such as the United Nations Convention on Cybercrime.

“There is a nexus between data governance and cybercrime, hence the need to review the Act and strengthen it where necessary to protect our national interest,” he said.

The senator noted that cybercrime had become more sophisticated globally, with criminals increasingly exploiting AI tools, digital platforms and weak data governance systems to target individuals, businesses and governments.

Nigeria has witnessed a steady rise in cyber-related crimes in recent years, ranging from identity theft and financial fraud to ransomware attacks, data breaches and digital espionage. Financial institutions, telecom operators, government agencies and private citizens have all been targets of cyber attacks.

Concerns have also grown over the misuse of personal data by digital platforms, mobile applications and online service providers, many of which harvest users’ information without adequate safeguards or consent mechanisms.

Security experts have repeatedly warned that Nigeria’s expanding digital economy and growing internet penetration make the country increasingly vulnerable to cyber threats if regulatory systems are not strengthened.

Salisu said lawmakers must develop adequate knowledge of the digital ecosystem to effectively legislate in the sector.

“As legislators, we need to understand data privacy and protection. You cannot legislate in an area you are not sufficiently knowledgeable about,” he said.

According to him, the workshop would enable lawmakers to assess the implementation of the National Data Protection Act since its enactment in 2023 and determine areas requiring improvement in line with global best practices.

He added that deliberations at the workshop would help shape a roadmap and timeline for the amendment of the law.

The lawmaker also cautioned Nigerians about the hidden risks associated with digital platforms and free online services.

According to him, many mobile applications, public WiFi networks and online platforms collect and process users’ personal data, often without users fully understanding the implications.

Also speaking, the Chairman of the House Committee on ICT and Cyber Security, Stanley Olajide (APC, Oyo), described data as one of the most valuable assets in the modern global economy.

He stressed the need for Nigeria to establish stronger legal and institutional frameworks capable of protecting sensitive digital assets and ensuring accountability in cases of data breaches.

Olajide noted that developed countries already operate strict data governance systems designed to safeguard national interests, particularly in cloud storage, digital transactions and cross-border movement of information.

“Anything that resides in Nigeria and is generated here must be protected by our laws. That is why we must strengthen our legal frameworks,” he said.

Nigeria enacted the National Data Protection Act in 2023 to regulate the processing of personal data, safeguard privacy rights and establish the Nigeria Data Protection Commission as the country’s primary data protection regulator.

However, stakeholders in the technology and cybersecurity sectors have continued to call for stronger enforcement mechanisms, improved institutional capacity and regular updates to the law to keep pace with emerging technologies and increasingly complex cyber threats. (The PUNCH)

Update news