ADVANCING DATA PROTECTION IN NIGERIA: THE NEED FOR COMPREHENSIVE LEGISLATION

The increasing reliance on digital technologies has raised significant concerns about data privacy, security, andregulatory compliance. As businesses, financial institutions, and government agencies collect and process vastamounts of personal data, the risks associated with unauthorized access, cyber threats, and data breaches haveescalated. Globally, nations have implemented comprehensive data protection laws, such as the European Union’sGeneral Data Protection Regulation (GDPR), to safeguard personal information, enforce accountability, andstrengthen cybersecurity. However, Nigeria lacks a dedicated and comprehensive data protection law, leading tochallenges in enforcement, compliance, and public trust. Data protection in Nigeria is governed by a fragmentedlegal framework, including the Cybercrime (Prohibition, Prevention, etc.) Act of 2015, the National InformationTechnology Development Agency (NITDA) Guidelines, and sector-specific regulations. These measures,however, were insufficient in addressing the growing complexities of digital data governance, cross-border datatransfers, and consumer rights protection. The absence of clear legal provisions, regulatory overlap, andinadequate enforcement mechanisms created legal uncertainties for businesses and individuals, limiting Nigeria’sability to align with global data protection standards. This paper examines the state of data protection in Nigeriaanalysing the shortcomings of existing policies and comparing them with international best practices. It highlightsthe need for a comprehensive data protection law that defines the rights of data subjects, strengthens enforcementmechanisms, and establishes institutional oversight. Implementing a robust legal framework would enhancecybersecurity resilience, support Nigeria’s digital economy, and foster trust in digital transactions, ultimatelypositioning Nigeria for greater global competitiveness in the data-driven economy.