Sri Lanka studies Nigeria’s data protection framework to enhance its own regulations

The Data Protection Authority of Sri Lanka recently visited Nigeria’s Data Protection Commission (NDPC) to gain insights into Nigeria’s data protection regulatory framework. The two-day study tour, held in October 2026, centred on institutional development, regulatory operations, and emerging priorities in personal data protection.

Nigeria’s efforts in data protection have attracted international recognition due to the notable progress made by the NDPC since the enactment of the Nigeria Data Protection Act in 2023. The Sri Lankan delegation’s visit was motivated by a desire to strengthen their own country’s emerging data protection ecosystem by learning from Nigeria’s regulatory experience.

During the engagement, both countries exchanged knowledge on building effective data protection institutions and implementing regulatory frameworks to address the challenges associated with managing personal data in the digital age. Nigeria shared insights into its public-private partnership model and strategic roadmap that has shaped its data protection system.

Such international cooperation is vital as countries worldwide seek to safeguard citizens’ personal information while enabling businesses and public institutions to innovate responsibly. For Nigeria, this visit represents an opportunity to share its regulatory journey and approaches with a global peer, further establishing Nigeria as a growing leader in data privacy governance on the African continent.

The World Bank Group has acknowledged Nigeria’s rapid advancements in data protection under the leadership of the NDPC, noting its global recognition within a relatively short time. Support from development partners has played a role in facilitating such knowledge exchange initiatives.

While specific Nigerian policies Sri Lanka may adopt remain undisclosed, the exchange highlights the importance of collaborative learning among regulatory authorities as data protection challenges evolve globally. Strengthening these frameworks is particularly relevant for Nigeria, where expanding digital economy activities demand robust safeguards for personal data.