The Nigeria Data Protection Commission (NDPC) has announced plans to pursue a review of the Nigeria Data Protection Act (NDPA) 2023 to accommodate emerging technologies such as Artificial Intelligence (AI), robotics, and big data.
The National Commissioner and Chief Executive Officer of the NDPC, Vincent Olatunji, disclosed the proposal in Abuja during activities marking the third anniversary of the signing of the Nigeria Data Protection Act into law by President Bola Ahmed Tinubu on June 12, 2023.
According to Olatunji, the rapid pace of technological advancement has made it necessary to revisit certain provisions of the legislation to ensure that Nigeria’s data protection framework remains relevant in an increasingly digital and technology-driven environment.
He explained that when the Act was originally drafted, many of the technologies currently reshaping the global digital economy were still developing, making it difficult for lawmakers to provide detailed provisions beyond broad references to emerging technologies.
The NDPC chief noted that the time has come for the law to move beyond generic terminology and specifically identify technologies such as artificial intelligence, robotics, and big data, which now play significant roles in economic and social development.
“We are in the era of emerging technologies. At the time the law was drafted, we could only make broad references to emerging technologies, but today we can specifically mention Artificial Intelligence, robotics, and big data,” Olatunji said.
He observed that the growing adoption of AI across industries has transformed the digital landscape and introduced new challenges relating to privacy, data governance, accountability, and regulation.
Olatunji stressed that while stronger legal provisions are needed to regulate AI and related technologies, human oversight must remain central to their deployment and governance.
According to him, technology should support human decision-making rather than replace it entirely.
“We still need the human component. We should not leave everything to artificial intelligence,” he stated.
The NDPC boss also highlighted concerns surrounding digital footprints, privacy rights, and data security, warning that regulators must remain proactive in addressing risks associated with technological innovation.
He said the commission would continue to monitor global trends and periodically review Nigeria’s data protection framework to ensure it keeps pace with evolving digital realities.
Olatunji noted that regular legislative reviews would help prevent the country’s data protection laws from becoming outdated, particularly at a time when technological developments are occurring at an unprecedented rate.
“We will continue to review the Act from time to time because technology is evolving very fast, and the law must evolve with it,” he said.
Looking ahead, the NDPC chief expressed optimism about the future of Nigeria’s data privacy ecosystem, projecting increased awareness, stronger compliance, and greater investor confidence over the next five years.
He said the commission is working to build a culture of privacy that will strengthen trust in Nigeria’s digital economy and position the country as an attractive destination for technology-driven investment and innovation.
“We are building a culture of privacy that will encourage investors and other stakeholders to see Nigeria as a country that is ready for digital business. The rights, freedoms, and interests of Nigerians and legal residents will continue to be protected,” Olatunji added.
The Nigeria Data Protection Act, enacted in June 2023, established a comprehensive legal framework for the protection of personal data, privacy rights, and responsible data processing across both the public and private sectors. It also created the NDPC as the country’s primary regulator for data protection and privacy matters.
