Lawmakers take steps to bolster online security regulations amid rising digital attacks

The National Assembly has initiated a review of the National Data Protection Act, which was enacted in 2023, as the country faces growing concerns over digital privacy and rising cyber threats, amidst the rapid evolution of technologies such as Artificial Intelligence.

n

Senator Afolabi Salisu, Chairman of the Senate Committee on ICT and Cyber Security, disclosed this information on Tuesday in Abuja at the opening of a three-day Data Protection Awareness Workshop for members of the Joint National Assembly Committee on ICT.

n

The workshop was facilitated by the Nigeria Data Protection Commission in partnership with Ampersand Development Partners, highlighting the need for collaboration in addressing emerging global realities, including advancements in AI systems and increased cross-border cyber threats.

n

According to Salisu, the planned review of the law is necessary to protect Nigeria's national interest, given the nexus between data governance and cybercrime, and the need to strengthen the Act where necessary.

n

The senator noted that cybercrime has become more sophisticated globally, with criminals exploiting AI tools, digital platforms, and weak data governance systems to target individuals, businesses, and governments, resulting in a steady rise in cyber-related crimes in Nigeria.

n

These crimes range from identity theft and financial fraud to ransomware attacks, data breaches, and digital espionage, with financial institutions, telecom operators, government agencies, and private citizens all being targeted.

n

Concerns have also grown over the misuse of personal data by digital platforms, mobile applications, and online service providers, which often harvest users' information without adequate safeguards or consent mechanisms.

n

Security experts have warned that Nigeria's expanding digital economy and growing internet penetration make the country increasingly vulnerable to cyber threats if regulatory systems are not strengthened, emphasizing the need for lawmakers to develop adequate knowledge of the digital ecosystem.

n

Salisu stressed that lawmakers must understand data privacy and protection to effectively legislate in the sector, saying "As legislators, we need to understand data privacy and protection, you cannot legislate in an area you are not sufficiently knowledgeable about."

n

The workshop aims to enable lawmakers to assess the implementation of the National Data Protection Act since its enactment in 2023 and determine areas requiring improvement in line with global best practices.

n

Deliberations at the workshop will help shape a roadmap and timeline for the amendment of the law, according to Salisu, who also cautioned Nigerians about the hidden risks associated with digital platforms and free online services.

n

Many mobile applications, public WiFi networks, and online platforms collect and process users' personal data, often without users fully understanding the implications, highlighting the need for awareness and education.

n

Stanley Olajide, Chairman of the House Committee on ICT and Cyber Security, described data as one of the most valuable assets in the modern global economy, saying "Data is gold, Nigeria's next prosperity will not be oil but data."

n

Olajide emphasized the need for Nigeria to establish stronger legal and institutional frameworks capable of protecting sensitive digital assets and ensuring accountability in cases of data breaches.

n

He noted that developed countries already operate strict data governance systems designed to safeguard national interests, particularly in cloud storage, digital transactions, and cross-border movement of information.

n

Olajide stressed that anything that resides in Nigeria and is generated there must be protected by the country's laws, saying "That is why we must strengthen our legal frameworks."

n

Nigeria enacted the National Data Protection Act in 2023 to regulate the processing of personal data, safeguard privacy rights, and establish the Nigeria Data Protection Commission as the country's primary data protection regulator.

n

However, stakeholders in the technology and cybersecurity sectors have continued to call for stronger enforcement mechanisms, improved institutional capacity, and regular updates to the law to keep pace with emerging technologies and increasingly complex cyber threats.