Nigeria: Data Protection

The Federal Government of Nigeria has issued a new compliance circular addressing data protection and responsible data governance requirements for Ministries, Departments, and Agencies (MDAs). This directive establishes mandatory standards for how government entities must handle, protect, and govern data under their control. The circular represents a significant step in strengthening Nigeria's data protection framework across the public sector.

Cloud computing has revolutionized data accessibility and business operations, yet the physical location of data remains subject to jurisdictional laws and regulatory oversight. As Nigeria emerges as one of Africa's largest digital markets, recent regulatory developments including the Central Bank's payment data localization requirements signal a strategic shift toward strengthening domestic control over critical digital infrastructure.

The introduction of registration requirements for certain data controllers and data processors under the General Application and Implementation Directive (GAID) has significantly altered the compliance landscape of Nigeria's data protection regime. However, the registration framework has also given rise to a common misconception among organisations that fall below the prescribed registration thresholds or otherwise qualify for an exemption: namely, that exemption from registration translates into exemption from data protection obligations.

When actress Anita Joseph used AI to swap her face onto content creator Caramel Plug's birthday photograph, it sparked a viral controversy that exposed critical gaps in how Nigeria's creative industry understands copyright ownership. Under the Copyright Act 2022, the photographer—not the subject—typically owns the image, while AI-generated derivatives exist in a legal gray zone that may leave no one with enforceable rights.

Data protection has evolved from a peripheral compliance issue to a core transaction risk factor in Nigerian M&A. With the Nigeria Data Protection Act 2023 and heightened regulatory enforcement...

As artificial intelligence tools like ChatGPT become increasingly prevalent in legal practice, Nigerian law firms face a critical decision: embrace the technology's productivity gains or risk falling behind competitors. With over 1,490 documented cases of AI-generated fabrications submitted to courts worldwide, the question isn't whether lawyers can use ChatGPT, but how to harness its power without destroying careers through hallucinated case law, confidentiality breaches, or regulatory violations.

The age of automated decision-making ("ADM") has arrived in Nigeria. Banks and fintech platforms deploy credit-scoring models to determine lending outcomes, and public institutions increasingly rely on data-driven systems in the exercise of statutory functions.

"Pseudonymisation" is one of those words that sounds more complex than it is, but its implications for data protection compliance in Nigeria are anything but simple.

Nigeria's agricultural sector is undergoing a profound digital transformation as smart farming technologies reshape traditional practices. As AI, IoT, and data analytics become integral to farming decisions...