Artificial IntelligenceRegulations

Nigeria

ProposedApproach: Risk-based AI bill that NITDA would enforce; data protection law binds now

Nigeria has a national AI strategy and a pending statute. Its National Digital Economy and E-Governance Bill would set risk-based duties and impact assessments for AI systems, with the National Information Technology Development Agency as enforcer, and in July 2026 the Senate committee chair said the bill was at third reading. Until enactment, the Nigeria Data Protection Act 2023 governs, with the National AI Strategy published in September 2025 setting direction.

Key points

  • The pending bill takes a risk-based approach, with risk classification, impact assessments, and audits that NITDA would enforce.
  • Earlier AI bills (2021, 2023) lapsed or stalled; this one is the credible vehicle.
  • The Nigeria Data Protection Act 2023 already binds AI systems processing personal data.
  • The National AI Strategy for 2025 to 2029, published in September 2025 after an August 2024 draft, frames the policy direction, led by the digital economy ministry with NITDA as implementer.

Laws and instruments

National Digital Economy and E-Governance Bill

Pending before the National Assembly
Proposed

Risk-based framework under which NITDA would classify AI systems by risk, require impact assessments and audits, and impose fines of up to the higher of 10 million naira or 2 percent of Nigerian revenue. The Senate committee chair said in July 2026 that the bill was at third reading; verify current status before relying on it.

Effective: Not yet in force
Primary source: National Assembly, bill text (2025) ↗

Nigeria Data Protection Act (applied to AI)

NDPA 2023
In force

Nigeria's data protection statute binds AI systems processing personal data, including controller obligations and DPO requirements.

Effective: In force since 2023
Primary source: NDPC, Nigeria Data Protection Act 2023 ↗

Timeline

  • 2021 to 2023
    Early AI bills introduced without completing the legislative cycle.
  • August 2024
    Draft national AI strategy published.
  • 2025 to 2026
    Digital Economy and E-Governance Bill advances with risk-based AI provisions and reaches third reading by July 2026.
  • September 2025
    The final National AI Strategy for 2025 to 2029 is published.

Who it applies to

Today, the NDPA governs AI systems handling Nigerians' personal data. If the pending bill passes, AI developers and deployers will face risk-based duties, impact assessments, and NITDA oversight.

Penalties

NDPA sanctions apply now. The pending bill would add NITDA enforcement orders and fines of up to 10 million naira or 2 percent of annual Nigerian revenue, whichever is higher.

Common questions

Does Nigeria have a comprehensive AI law?
Not yet. Nigeria has a national AI strategy and a pending statute. Its National Digital Economy and E-Governance Bill would set risk-based duties and impact assessments for AI systems, with the National Information Technology Development Agency as enforcer, and in July 2026 the Senate committee chair said the bill was at third reading. Until enactment, the Nigeria Data Protection Act 2023 governs, with the National AI Strategy published in September 2025 setting direction.
What are the penalties for AI violations in Nigeria?
NDPA sanctions apply now. The pending bill would add NITDA enforcement orders and fines of up to 10 million naira or 2 percent of annual Nigerian revenue, whichever is higher.
Who does AI regulation in Nigeria apply to?
Today, the NDPA governs AI systems handling Nigerians' personal data. If the pending bill passes, AI developers and deployers will face risk-based duties, impact assessments, and NITDA oversight.
Related topics
High-risk systemsTransparency and disclosure
Cite this page

Artificial Intelligence Regulations, "AI Regulation in Nigeria," reviewed October 26, 2026, https://artificialintelligenceregulations.com/jurisdictions/nigeria.html.

Entries state the position as of the review date and link to the primary text for verification.