Nigeria urges African data regulators to adopt risk-based data protection rules

The Nigeria Data Protection Commission (NDPC) has advocated for the adoption of risk-based data protection regulations among African data authorities. This approach aims to foster investment in digital infrastructure while enhancing trust in the continent’s expanding digital economy.

The NDPC made this call during its participation at the 2026 International Telecoms Week (ITW) and Datacloud Africa event held in Nairobi, Kenya. The Commission engaged in discussions centered on regulation, digital infrastructure, connectivity investment, and data protection, emphasizing the need for regulatory alignment that supports cross-border digital infrastructure development.

Promoting Privacy by Design and Regulatory Clarity

Represented by Mrs Caroline Okafor, Head of Compliance Services Management at NDPC, the Commission highlighted the importance of ‘Privacy by Design’ principles. It urged the establishment of clear, transparent, and predictable regulatory requirements. Such certainty is vital for digital infrastructure providers and investors making long-term commitments, particularly as African nations aim to meet growing demands for digital services and cloud computing technologies.

Balancing Trust and Investment

The NDPC stressed that effective regulation should foster trust without creating investment barriers. A risk-based approach to data protection is recommended to allow innovation and responsible investment to coexist with the safeguarding of personal data rights and privacy.

Okafor also pointed out during panel discussions the necessity of sector-specific guidelines and continuous public awareness campaigns to ensure stronger compliance with data protection laws. She emphasized that regulations should provide businesses clear pathways to innovate responsibly while protecting data subjects.

Implications for Nigeria and the African Digital Economy

This initiative comes at a critical time as Nigeria and other African countries pursue ambitious plans to expand their digital infrastructure. For Nigeria, growing data consumption — recently reported at approximately 1.66 million terabytes, a nearly 47% increase — highlights the urgent need for robust yet enabling data protection frameworks.

With Nigeria positioned among the leading Sub-Saharan countries poised to benefit from digital growth, establishing a regulatory environment that supports sustainable investment and innovation is paramount. The NDPC’s stance underscores the balancing act required to protect citizens’ data privacy while driving the continent’s digital transformation forward.

By influencing regulatory practices continent-wide, Nigeria is playing a significant role in shaping policies that could enhance investor confidence, infrastructure development, and ultimately, economic growth.