Regulations · Nigeria
AI REGULATION

Nigeria

DEVELOPING

Nigeria is Africa's largest economy with growing AI adoption, developing governance frameworks through its National Centre for AI and Robotics.

KEY LEGISLATION 3 laws
Nigeria Data Protection Act (NDPA) ENACTED
2023-06
Comprehensive data protection law establishing the Nigeria Data Protection Commission with provisions on automated decision-making
National Centre for AI and Robotics (NCAIR) Framework ENACTED
2021-01
Government body promoting responsible AI development and advising on governance approaches for AI applications
National Digital Economy Policy and Strategy (NDEPS) ENACTED
2020-11
Digital economy strategy including AI and emerging technology governance as a key pillar
ANALYSIS

Regulatory Landscape

Nigeria’s AI governance development reflects its position as Africa’s largest economy and most populous nation, with rapidly growing technology adoption and an expanding startup ecosystem. The country’s approach to AI regulation is early-stage, building institutional foundations and gathering governance experience through its National Centre for AI and Robotics while relying on data protection and existing sector regulations for immediate oversight needs.

The scale of Nigeria’s population and economy means AI governance decisions carry significant implications for the continent. Nigerian regulatory approaches may influence other West African nations and contribute to African Union-level governance standards.

Data Protection Foundation

The Nigeria Data Protection Act, enacted in June 2023, represents a significant advancement in the country’s digital governance infrastructure. The NDPA establishes the independent Nigeria Data Protection Commission and provides comprehensive protections that apply to AI systems processing personal data. Provisions on automated decision-making require controllers to inform data subjects about significant decisions based solely on automated processing and provide meaningful access to the logic involved.

The Commission’s development of enforcement capacity and sector-specific guidance will determine how effectively data protection law addresses AI governance gaps. Early priorities include building technical expertise to assess AI system compliance and developing guidance for common AI applications.

NCAIR and Innovation Support

The National Centre for AI and Robotics, established under the National Information Technology Development Agency (NITDA), serves as Nigeria’s focal point for AI development and governance. NCAIR promotes responsible AI research and development, provides advisory services to government on AI policy, and supports AI startups through incubation programs.

NCAIR’s governance role is primarily advisory and promotional rather than regulatory, reflecting the current emphasis on building AI capabilities before imposing extensive regulatory requirements. The Centre’s work on AI ethics guidelines and responsible development principles is informing broader policy development.

Industry Impact

Nigeria’s technology ecosystem — concentrated in Lagos with growing hubs in Abuja and other cities — is Africa’s largest by funding and company count. AI adoption is growing across financial services (banking, fintech), telecommunications, agriculture, and e-commerce. International companies serving Nigeria’s 200+ million consumers increasingly deploy AI systems, creating governance imperatives even in the absence of AI-specific legislation.

The country’s large youth population, growing internet penetration, and dynamic private sector create both opportunity and urgency for AI governance development that enables beneficial innovation while protecting citizens from AI-related harms.

What Comes Next

Nigeria’s AI governance development will likely proceed through continued institutional capacity building at NCAIR and the Data Protection Commission, sector-specific guidance for high-impact applications (particularly in financial services), and gradual development of national AI governance principles. Regional cooperation through ECOWAS and the African Union will influence the approach. Comprehensive AI legislation is a medium-to-long-term prospect, with enforcement of existing data protection law and sector-specific measures providing near-term governance coverage.