Abuja: The National Commissioner of the Nigeria Data Protection Commission (NDPC), Dr. Vincent Olatunji, has announced plans to review the Nigeria Data Protection Act (NDPA) to address emerging technologies such as Artificial Intelligence (AI), robotics, and big data. Olatunji revealed this initiative in Abuja, marking three years since the NDPA was signed into law by President Bola Tinubu on June 12, 2023.
According to News Agency of Nigeria, the rapid evolution of digital technologies and a deeper understanding of the data protection ecosystem have underscored the necessity to update certain provisions of the Act as it becomes due for review. Dr. Olatunji emphasized that when the legislation was initially developed, the digital landscape was less advanced, leading to broad references to emerging technologies. Today, specific mentions of AI, robotics, and big data have become indispensable.
Dr. Olatunji noted, “We are in the era of emerging technologies. At that time, we could only make general references to emerging technologies, but today we can specifically mention Artificial Intelligence, robotics, and big data. Ten years ago, nobody was talking about AI the way we are doing now, but today it has become central to virtually every aspect of digital transformation. We need to be more specific about what constitutes emerging technologies and provide examples because the technologies keep evolving.”
The national commissioner highlighted the growing adoption of AI and other advanced technologies, underscoring the need for periodic reviews of the law to ensure the regulatory framework remains relevant and responsive. He stressed the importance of maintaining human oversight in the deployment of AI systems, stating, “We still need the human component. We should not leave everything to artificial intelligence.”
Dr. Olatunji also identified digital footprints and other privacy-related concerns as areas requiring continuous attention to keep pace with technological developments. He pointed out that while some countries still operate data protection laws enacted more than a decade ago, Nigeria would continue to embrace regular reviews to prevent its legislation from becoming outdated.
Discussing the future of the sector, Dr. Olatunji expressed optimism that Nigeria’s data privacy ecosystem would witness significant growth over the next five years. He anticipated improvements in awareness and compliance levels, with privacy consciousness becoming more deeply embedded in the country’s digital culture. “I see growth, development, awareness, and greater trust in the ecosystem. Compliance will become a necessity rather than an option. We are building a culture of privacy that will make investors and other stakeholders see Nigeria as a country that is ready for digital business. The rights, freedoms, and interests of Nigerians and legal residents will be adequately protected,” he stated.
The Nigeria Data Protection Act, signed into law on June 12, 2023, provides the legal framework for the protection of personal data and privacy rights in Nigeria.