Nigeria - AI and Robotics Regulation Bill (RAI-NG-NA-ENIAIXX-2024)
Bill on Establishment of the National Institute for Artificial Intelligence and Robotic Studies Regulation Commission
Nigeria
RAI-NG-NA-ENIAIXX-2024This consolidated bill proposes the establishment of the National Institute for Artificial Intelligence and Robotic Studies Regulation Commission to oversee, regulate and promote safe AI and robotics development in Nigeria. It requires registration, risk assessments, transparency measures, data protection safeguards, and creates enforcement powers for conformity assessment, certification, and sanctions.
Summary
Background and purpose: The Bill on Establishment of the National Institute for Artificial Intelligence and Robotic Studies Regulation Commission is a consolidated legislative proposal presented to the House of Representatives to create a national regulatory body charged with coordinating AI and robotics research, setting standards for development and deployment, protecting fundamental rights, and managing risks associated with AI systems. The Bill consolidates multiple proposals submitted across recent legislative sessions and aims to provide a unified institutional framework to guide Nigeria's approach to AI governance.
Institutional architecture: The Bill establishes an independent statutory Commission (the Commission) with a governing board, an executive Director-General, technical advisory panels, and regional liaison units. The Commission's mandate includes standard-setting, registration and certification of AI systems deemed high-risk, licensing of AI service providers, coordination with sectoral regulators, and facilitation of research and capacity building through an affiliated National Institute for AI and Robotic Studies.
Key regulatory obligations: The Bill requires developers, deployers, and importers of AI systems to register certain categories of systems with the Commission, conduct pre-deployment risk assessments and conformity assessments for systems that affect safety, health, fundamental rights or critical infrastructure, maintain documentation for audit and model interpretability, and implement human oversight measures. It also prescribes data protection safeguards and mandates reporting of incidents and breaches. The Bill aligns some obligations with existing data protection law and mandates cooperation with the Nigeria Data Protection Commission (NDPC) and the National Information Technology Development Agency (NITDA).
Risk-based approach and scope: The Bill adopts a risk-tiered framework: minimal-risk systems face light-touch obligations, medium-risk systems require transparency and documentation, and high-risk systems must undergo stricter conformity assessment, certification, and post-market monitoring. Examples of high-risk use cases include biometric identification, critical infrastructure control, automated decision-making affecting public services, and certain law-enforcement applications.
Enforcement and remedies: The Bill empowers the Commission to conduct inspections, order corrective measures, impose administrative fines, suspend or revoke registrations and licenses, and coordinate judicial referrals where criminal conduct is suspected. It also establishes administrative appeals and judicial review mechanisms to protect due process rights.
Research, capacity building and public interest: The Bill creates and funds a National Institute for AI and Robotic Studies (attached to the Commission) that will run research programs, training, public awareness campaigns, and provide technical support to government agencies and industry. It aims to foster local talent, support standards adoption, and promote ethical, inclusive AI in line with national development objectives.
International cooperation and harmonization: The Bill instructs the Commission to cooperate with international bodies, enter into mutual recognition agreements for conformity assessments, and apply recognised international technical standards where appropriate. The Commission is also to advise on trade, export controls, and cross-border data flows in coordination with the Ministry of Foreign Affairs and relevant economic regulators.
Relationship with existing law: The Bill is designed to complement the Nigeria Data Protection Act and existing sectoral regulators (health, finance, telecoms, energy). It delegates technical standard-setting to the Commission while preserving the primary regulatory jurisdiction of sectoral regulators over sector-specific activities.
Legislative status and next steps: As recorded in official plenary summaries and National Assembly repository entries, the consolidated Bill was debated in late 2024, stepped down on occasion to allow for consolidation of multiple proposals, and progressed to second reading on 3 December 2024. The Bill remains under review by committee and would require committee reports, possible amendments and final passage by both chambers before assent by the President.
Implications for stakeholders: If enacted, the Bill will require businesses, research institutions and public agencies to adapt compliance programs, register qualifying AI systems, adopt documented risk-management processes, and participate in certification or conformity-assessment regimes. It will also provide an institutional focal point for research, public education and international engagement on AI in Nigeria.
Sources and basis: This entry is based on official National Assembly plenary summaries, a National Institute for Legislative and Democratic Studies (NILDS) working paper and related government press material, as well as official pages for the Nigeria Data Protection Commission and NITDA.
Note: Readers should consult the Bill text for precise definitions, thresholds and procedural steps. Official PDF copies and National Assembly records should be referenced where available for legal and compliance decisions.
Full article
Read full text ↗Overview
The Bill proposes a statutory commission to regulate artificial intelligence and robotics in Nigeria by creating the National Institute for Artificial Intelligence and Robotic Studies Regulation Commission and an affiliated research institute. It consolidates several private and sponsored House Bills introduced across the 10th Assembly and aims to balance innovation, public safety and rights protection through a risk-based regulatory model. The Commission is empowered to set technical standards, require registration and conformity assessment for higher-risk systems, coordinate with existing agencies such as the Nigeria Data Protection Commission (NDPC) and National Information Technology Development Agency (NITDA), and foster capacity building and public interest research.
Definitions
The Bill defines critical terms to ensure legal clarity: "artificial intelligence system" (AI system) as software or systems that use datasets and algorithmic processes to perform tasks that would otherwise require human intelligence; "robotics" to include physical machines with autonomous or semi-autonomous control functions; "provider" (entity that develops or supplies an AI system); "operator/deployer" (entity that places an AI system into service); "high-risk AI" (systems posing substantial risk to safety, health, fundamental rights or critical infrastructure); and "conformity assessment" (technical evaluation to ensure compliance with Commission standards). Precise statutory definitions determine which obligations and certification pathways apply to a system.
Governance and Institutional Framework
The Commission is established as an independent regulatory agency with a Board (including a Chair, representatives of relevant ministries and independent experts), a Director-General, sectoral advisory committees, and regional liaison offices. The governing Board sets policy and approves standards; the Director-General manages operations, enforcement and international cooperation. The Bill mandates inter-agency coordination mechanisms linking the Commission with sector regulators (health, finance, transport), the NDPC, NITDA, and the Ministry of Communications and Digital Economy (Digital Economy Ministry) to avoid regulatory overlap and enable referrals. The Commission is funded through a combination of parliamentary appropriations, fees for registration and certification, and grants.
Key Focus Areas
The Bill focuses on: (1) Registration and certification of high-risk AI and robotics systems; (2) Mandatory risk assessments and mitigation plans before deployment; (3) Transparency obligations including explainability, documentation and human oversight; (4) Data protection and privacy safeguards aligned with the Nigeria Data Protection Act; (5) Safety testing and conformity-assessment processes; (6) Post-market monitoring and incident reporting; (7) Market surveillance and enforcement including sanctions; and (8) Research, training and public interest initiatives through the National Institute for AI and Robotic Studies. The Bill distinguishes obligations by risk-level and by sector, imposing the strictest controls where systems affect life, liberty, essential services or national security.
Implementation Framework
Operational measures required by the Bill include registration portals, a conformity-assessment scheme (self-assessment, third-party testing and Commission-led certification for different risk tiers), a public registry of certified systems, and incident reporting channels. The Commission is required to publish regulations and technical standards within a set period after enactment and to provide transitional arrangements for systems already in operation. The Bill also empowers the Commission to accredit conformity-assessment bodies and to recognise international test reports and certificates through mutual recognition agreements to reduce duplication for multinational providers.
Monitoring and Evaluation
The Bill mandates regular monitoring including mandatory periodic audits of high-risk systems, post-market surveillance, data-breach and incident reporting with timelines, and public reporting on enforcement actions. Performance indicators include number of registered systems, compliance rates, safety incidents prevented, research outputs from the Institute, and capacity-building metrics. The Commission must produce annual reports to the National Assembly and is subject to parliamentary oversight and audit by the Auditor-General.
Penalties, Liability, and Appeals
The Bill provides a graduated enforcement regime: warnings and corrective orders for minor breaches; administrative fines calibrated to offence severity and entity size; suspension or revocation of registration or licences for serious or repeated breaches; and criminal referral where conduct is willful, fraudulent or jeopardises public safety. The Bill preserves private and public civil remedies for individuals harmed by AI-driven decisions and establishes an administrative appeals process before judicial review to ensure due process.
Relationship to Other Instruments
The Bill is expressly designed to operate alongside existing instruments: the Nigeria Data Protection Act and NDPC rules on automated decisions; the NITDA Act and National ICT policies; sectoral laws governing health, finance and transport; the Cybercrimes Act; and international trade and export controls. It includes provisions on data sharing, cross-agency coordination, and a requirement that the Commission consult sector regulators when issuing sector-specific technical standards so as to avoid duplication or contradiction.
International Alignment
The Bill requires the Commission to align Nigeria's regulatory approach with recognised international standards and frameworks (ISO, OECD AI principles, and emerging regional instruments). The Commission is authorised to enter into cooperative arrangements with counterpart regulators, participate in standard-setting, and seek technical assistance. The Bill also contemplates mutual recognition of conformity assessments and interoperable certification schemes to facilitate trade and attract investment while preserving national safeguards.
Implementation Timeline
| Milestone | Target |
|---|---|
| Parliamentary second reading (recorded) | 2024-12-03 |
| Committee review and reports | Within 3–6 months of second reading (subject to parliamentary schedule) |
| Publication of implementing regulations | Within 6 months of enactment |
| Commission operational (staffing and portals) | 6–12 months after regulations |
| Start of mandatory registration for high-risk systems | 12 months after regulations |
Sources and References
| Source | Type |
|---|---|
| A Bill for an Act to Provide for the Establishment of the National Institute for Artificial Intelligence and Robotic Studies | Primary Source |
Requirements for a company
What an organisation has to do under Nigeria - AI and Robotics Regulation Bill (RAI-NG-NA-ENIAIXX-2024), at a glance. Not legal advice — the table below gives the provision and deadline for each item.
Not yet in force (Under Review). These requirements apply once the instrument takes effect and may change before then.
Must do
9- Register high-risk AI and robotics systems with the Commission.Providers of high-risk AI and robotics systems
- Conduct mandatory risk assessments and develop mitigation plans.Providers and deployers of AI and robotics systems
- Implement data protection and privacy safeguards aligned with the Nigeria Data Protection Act.Providers and operators of AI and robotics systems
- Conduct safety testing and obtain conformity assessment or certification.Providers of AI and robotics systems
- Report data breaches and incidents related to AI systems with specified timelines.Providers and operators of AI and robotics systems
- Undergo mandatory periodic audits for high-risk AI systems.Providers and operators of high-risk AI systems
- +3 more in the table below
Must not do
0Nothing in this category.
Should do
0Nothing in this category.
Should not do
0Nothing in this category.
Who must do what
The obligations under Nigeria - AI and Robotics Regulation Bill (RAI-NG-NA-ENIAIXX-2024), most serious first. Not legal advice — verify against the official text before relying on it.
| # | Who | Requirement | By when | Where | Severity |
|---|---|---|---|---|---|
| 1 | Providers of high-risk AI and robotics systems | Register high-risk AI and robotics systems with the Commission. “Registration and certification of high-risk AI and robotics systems” | 12 months after implementing regulations are published | — | Critical |
| 2 | Providers and deployers of AI and robotics systems | Conduct mandatory risk assessments and develop mitigation plans. “Mandatory risk assessments and mitigation plans before deployment” | Before deployment | — | Critical |
| 3 | Providers and operators of AI and robotics systems | Implement data protection and privacy safeguards aligned with the Nigeria Data Protection Act. “Data protection and privacy safeguards aligned with the Nigeria Data Protection Act” | — | — | Critical |
| 4 | Providers of AI and robotics systems | Conduct safety testing and obtain conformity assessment or certification. “Safety testing and conformity-assessment processes” | Before placing on market | — | Critical |
| 5 | Providers and operators of AI and robotics systems | Report data breaches and incidents related to AI systems with specified timelines. “data-breach and incident reporting with timelines” | — | — | Critical |
| 6 | Providers and operators of high-risk AI systems | Undergo mandatory periodic audits for high-risk AI systems. “mandatory periodic audits of high-risk systems” | — | — | Critical |
| 7 | Providers and operators of AI and robotics systems | Implement transparency measures including explainability and documentation. “Transparency obligations including explainability, documentation and human oversight” | — | — | Important |
| 8 | Operators and deployers of AI and robotics systems | Ensure human oversight for deployed AI and robotics systems. “Transparency obligations including explainability, documentation and human oversight” | — | — | Important |
| 9 | Providers and operators of AI and robotics systems | Conduct post-market monitoring of AI and robotics systems. “Post-market monitoring and incident reporting” | — | — | Important |
Related Regulations
National Artificial Intelligence and Robotic Sciences (Establishment) Bill (HB 601)
Nigeria95% similar
Control of Usage of Artificial Intelligence Technology in Nigeria Bill (HB 942)
Nigeria95% similar
National Artificial Intelligence Policy (NAIP)
Nigeria93% similar
Draft Code of Practice for Artificial Intelligence (NITDA)
Nigeria93% similar
National Artificial Intelligence Strategy (NAIS)
Nigeria92% similar
© Regulations.AI · updated on 13-Jun-2026