Nigeria AI Regulation Overview

Overview

Nigeria's overall approach to artificial intelligence (AI) regulation is rooted in the nation's broader digital economy vision and is actively transitioning toward a comprehensive, risk-based national governance model. Policy guidance originated under the foundational National Digital Economy Policy and Strategy (NDEPS) 2020–2030, which established developmental regulation, soft infrastructure, and emerging technologies as core national pillars. Building upon NDEPS, the Federal Ministry of Communications, Innovation and Digital Economy (FMCIDE), in collaboration with the National Information Technology Development Agency (NITDA) and the National Centre for Artificial Intelligence and Robotics (NCAIR), developed the National Artificial Intelligence Policy (NAIP) and the National Artificial Intelligence Strategy (NAIS). These policy instruments articulate Nigeria's strategic ambition to lead AI innovation in Africa while embedding ethical, human-centred, and inclusive safeguards across all sectors.

Alongside strategy development, federal regulatory authorities and professional bodies have introduced binding and soft-law operational frameworks to govern AI technologies. In 2022, NITDA issued the Code of Practice for Interactive Computer Service Platforms / Internet Intermediaries, establishing enforceable rules for online platforms and automated content moderation. In 2024, the Nigerian Bar Association Section on Legal Practice (NBA-SLP) launched professional guidance to govern AI deployment in the legal sector. To establish a dedicated statutory regime, the Nigerian National Assembly has undertaken legislative efforts to consolidate multiple private and sponsored bills into a unified framework: the Bill on Establishment of the National Institute for Artificial Intelligence and Robotic Studies Regulation Commission, which progressed to second reading in late 2024.

Regulatory Approach

Nigeria pursues a hybrid regulatory approach that combines horizontal policy direction, sectoral guidelines, and risk-tiered standards. Rather than relying solely on rigid, static mandates, federal policy instruments—such as the NAIS and NAIP—and NITDA's Draft Code of Practice for Artificial Intelligence adopt a technology-neutral, risk-based classification model. Systems are evaluated across risk categories (minimal, limited, medium, high-risk, and unacceptable) based on their potential impact on public safety, fundamental human rights, health, and critical infrastructure. High-risk AI use cases, including biometric identification, automated public service allocation, and critical infrastructure management, face enhanced pre-deployment duties including conformity assessments, mandatory registration, model documentation, and human oversight.

To encourage innovation without compromising safety, Nigeria's regulatory framework incorporates flexible compliance mechanisms such as regulatory sandboxes, pilot demonstration projects, and public-private capacity-building initiatives. Binding operational duties are calibrated according to system impact and organizational role, distinguishing obligations for AI providers, deployers, importers, and large digital platforms. Furthermore, the federal approach emphasizes inter-agency collaboration, ensuring that horizontal AI standards operate harmoniously with existing statutory frameworks, specifically the Nigeria Data Protection Act (NDPA) 2023, cybercrime legislation, and sector-specific financial and telecommunications rules.

Key AI Legislation

• National Digital Economy Policy and Strategy (NDEPS) 2020–2030 (2019): In-force national blueprint issued by the Federal Government establishing eight strategic pillars, including developmental regulation, soft infrastructure, and emerging technologies to drive national digital transformation.
• Code of Practice for Interactive Computer Service Platforms / Internet Intermediaries (2022): In-force regulation issued by NITDA establishing co-regulatory operational standards, 24-hour notice-and-takedown procedures, human oversight over automated content moderation, and local liaison requirements for Large Service Platforms.
• National Artificial Intelligence Policy (NAIP) (Draft, 2023): Cross-sectoral policy framework commissioned by FMCIDE and NITDA setting out national ethical principles, institutional oversight roles, and risk-based governance mechanisms.
• National Artificial Intelligence Strategy (NAIS) (Draft, 2024): Comprehensive national strategy structured around five pillars (infrastructure, ecosystem, sector adoption, responsible AI, and governance) establishing national implementation roadmaps, risk management frameworks, and capacity targets.
• Nigerian Bar Association Guidelines for the Use of Artificial Intelligence in the Legal Profession (2024): Practitioner guidelines adopted by the NBA-SLP setting ethical, confidentiality, AI Impact Assessment, client disclosure, and vendor management standards for legal practitioners.
• Draft Code of Practice for Artificial Intelligence (NITDA) (Draft, 2025): Proposed non-sector-specific NITDA code establishing baseline risk management, pre-deployment testing, technical logging, mandatory disclosures, and registration requirements for high-risk AI system providers and deployers.
• Control of Usage of Artificial Intelligence Technology in Nigeria Bill (HB 942) (Under Review, 2023): Legislative proposal introduced in the House of Representatives to establish national oversight, developer licensing, risk classification, and safety testing for AI technologies.
• National Artificial Intelligence and Robotic Sciences (Establishment) Bill (HB 601) (Under Review, 2023): Parliamentary bill proposing a statutory national institute to lead research, education, professional certification, and technical standard-setting in AI and robotics.
• Bill on Establishment of the National Institute for Artificial Intelligence and Robotic Studies Regulation Commission (Under Review, 2024): Consolidated legislative proposal combining HB 601, HB 942, HB 143, and HB 1810 to establish an independent regulatory Commission with standard-setting, registration, licensing, and market surveillance powers.

Governance & Enforcement Bodies

Governance of AI in Nigeria involves a multi-layered institutional framework spanning ministry leadership, specialized technical agencies, primary sectoral regulators, and proposed statutory commissions. Strategic oversight is led by the Federal Ministry of Communications, Innovation and Digital Economy (FMCIDE), which coordinates inter-ministerial digital initiatives and chairs the proposed National AI Steering Committee. Technical execution and regulatory development are spearheaded by the National Information Technology Development Agency (NITDA) and its specialized technical hub, the National Centre for Artificial Intelligence and Robotics (NCAIR). NITDA exercises standard-setting, auditing, and platform regulation powers under the NITDA Act 2007.

Sectoral governance relies on co-regulatory alignment between NITDA and primary regulatory authorities. The Nigeria Data Protection Commission (NDPC) enforces data privacy standards across AI processing activities under the Nigeria Data Protection Act 2023. Communications and broadcasting aspects are supervised in coordination with the Nigerian Communications Commission (NCC) and the National Broadcasting Commission (NBC), while financial AI applications engage the Central Bank of Nigeria (CBN). Under pending federal legislation, primary regulatory authority for AI and robotics registration, licensing, and high-risk system certification would be consolidated under a new statutory body: the National Institute for Artificial Intelligence and Robotic Studies Regulation Commission.

Penalties & Enforcement

Enforcement mechanisms in Nigeria's AI regulatory framework comprise administrative sanctions, regulatory compliance directives, professional disciplinary procedures, and proposed statutory fines. Under the in-force Code of Practice for Interactive Computer Service Platforms, failure to comply with content moderation, reporting, or local liaison mandates constitutes a direct violation of the NITDA Act 2007. NITDA is empowered to execute market surveillance, audit compliance submissions, issue administrative remediation orders, impose monetary penalties, or institute operational restrictions against non-compliant platforms.

Under emerging and proposed instruments—including the Draft Code of Practice for AI, HB 942, and the consolidated Commission Bill—enforcement follows a graduated approach. Regulators may issue formal warnings, require corrective action plans, suspend or revoke system certifications and developer licences, and impose administrative fines. In cases involving malicious, reckless, or unauthorized deployment of high-risk AI systems affecting national security, public safety, or fundamental rights, proposed statutory bills provide for judicial referrals and criminal prosecution. For legal practitioners, non-compliance with the NBA AI Guidelines triggers professional disciplinary proceedings under the Rules of Professional Conduct for Legal Practitioners (RPC) 2023, alongside civil liability exposure for harm caused to clients.

Data Protection Framework

Data protection forms a critical legal baseline for all AI development, training, and deployment in Nigeria. The primary governing statutory instrument is the Nigeria Data Protection Act 2023 (NDPA), enforced by the Nigeria Data Protection Commission (NDPC), which operates alongside the earlier Nigeria Data Protection Regulation (NDPR). All national AI strategy and regulatory documents—including the NAIS, NAIP, Draft AI Code of Practice, and proposed parliamentary bills—mandate strict adherence to NDPA principles whenever an AI system collects, processes, or retains personal data.

Key data protection obligations applied to AI systems include establishing a lawful basis for processing, maintaining data minimisation, implementing strict purpose limitation, ensuring accuracy in training datasets, and enforcing technical and organizational security measures. The framework grants data subjects fundamental privacy rights, including rights to information, object to automated decision-making, and seek redress. Furthermore, professional and agency guidelines instruct AI deployers to perform Algorithmic Impact Assessments and Data Protection Impact Assessments (DPIAs), ensure secure data residency, and vet third-party model providers to prevent unauthorized data exposure or privacy violations.

Sector-Specific Rules

Sector-specific AI rules in Nigeria are established through targeted agency guidelines, sectoral regulatory coordination, and professional self-regulation. In the legal sector, the Nigerian Bar Association Section on Legal Practice (NBA-SLP) established mandatory practice guidelines in August 2024. These guidelines regulate the use of legal research, document automation, and generative AI tools, requiring lawyers to maintain human oversight, perform AI Impact Assessments, maintain strict client confidentiality, vet vendor contracts, disclose AI usage where material, and verify output accuracy to prevent court misrepresentations.

In the public sector, the NAIS, NAIP, and Draft AI Code of Practice establish heightened oversight rules for AI used in government procurement, public benefits administration, justice, and critical infrastructure. Mandatory risk assessments, human-in-the-loop controls, and explainability disclosures are required before deployment in public administrative processes. In financial services and telecommunications, strategic frameworks instruct NITDA and the proposed Commission to co-regulate with the Central Bank of Nigeria (CBN) and the Nigerian Communications Commission (NCC) to oversee automated credit scoring, fintech algorithms, and network management systems.

International Alignment

Nigeria's AI governance policies explicitly prioritize alignment with recognized international principles and technical standards while addressing national socioeconomic priorities. Frameworks such as the NAIS, NAIP, and Draft AI Code of Practice draw heavily upon international models—notably the European Union AI Act, the OECD Principles on Artificial Intelligence, and United Nations ethical guidance. This alignment is reflected in Nigeria's adoption of risk-based system classifications, pre-deployment conformity assessments, model transparency documentation (such as model cards and data sheets), and explicit protections for fundamental human rights.

To support global interoperability, proposed statutory legislation mandates that regulatory bodies cooperate with international standards organizations and cross-border regulatory authorities. The pending consolidated Commission Bill authorizes the regulatory authority to enter into mutual recognition agreements for conformity assessments and to adopt recognized international technical standards for safety, cybersecurity, and testing. Concurrently, Nigeria's frameworks assert local adaptation, incorporating specific requirements for indigenous content development, local data ecosystems, infrastructure constraints, and regional language inclusivity across AI deployments.

Future Developments

The future trajectory of AI regulation in Nigeria points toward formal statutory enactment and operationalization of specialized oversight infrastructure. A major legislative milestone occurred in late 2024 when the House of Representatives approved the consolidation of multiple AI bills—HB 601, HB 942, HB 143, and HB 1810—into a single legislative vehicle: the Bill on Establishment of the National Institute for Artificial Intelligence and Robotic Studies Regulation Commission. This consolidated bill passed its second reading on December 3, 2024, and was referred to parliamentary committees for detailed technical review and public hearings prior to final passage.

In parallel with legislative progression, NITDA and FMCIDE are advancing the finalization of the National Artificial Intelligence Strategy (NAIS) and the Draft Code of Practice for Artificial Intelligence following broad multi-stakeholder consultations. Expected upcoming implementation measures include the formal launch of regulatory sandboxes for testing trustworthy AI tools, the establishment of the National AI Ethics Commission, the rollout of sectoral deployment roadmaps in health and agriculture, and the implementation of a national high-risk AI system registry.

Enforcement Bodies