Nigeria Hosts African Regulators to Deepen Cross-Border Data Security

JOEL OLADELE, Abuja

Nigeria has brought together data protection authorities from across Africa in Abuja in a fresh push to strengthen cross-border data security and improve how personal information is managed across the continent.

The initiative, led by the Nigeria Data Protection Commission in collaboration with the World Bank and Smart Africa, has drawn participants from nine countries; The Gambia, Burundi, Sierra Leone, Somalia, Liberia, Malawi, Zambia, Ethiopia and Kenya.

Also in attendance are regional blocs such as the Economic Community of West African States, Economic and Monetary Community of Central Africa and Intergovernmental Authority on Development, reflecting growing efforts to align data governance frameworks across Africa.

Opening the session, NDPC National Commissioner, Vincent Olatunji, said the exchange was structured to help countries move beyond passing laws to actually enforcing them.

He noted that Nigeria’s progress in the sector has been driven by political will and coordination among institutions, especially following the signing of the Data Protection Act in 2024 by President Bola Tinubu.

According to him, the country has since deployed locally developed platforms for registration, licensing and compliance monitoring, reducing reliance on foreign systems and strengthening data sovereignty.

Olatunji said the programme places strong emphasis on cross-border data flows, describing them as central to Africa’s expanding digital economy.

“Our focus is to ensure that personal data can move across borders safely, with trust and enforceable safeguards,” he said.

The exchange is being implemented under the West Africa Regional Digital Integration Project supported by the World Bank, and is designed as a peer-learning platform rather than a conventional training programme.

At the World Bank session, Senior Counsel, Elena Gasol, said the challenge for many African countries has shifted from legislation to enforcement.

She explained that while several countries now have data protection laws, building institutions capable of implementing those laws remains a key hurdle.

Gasol said the programme is aimed at bridging that gap by encouraging practical knowledge-sharing among regulators.

“The main issue now is capacity—how to enforce rules, handle complaints and build trust in the system,” she said.

She added that the exchange is expected to yield concrete outcomes, including short-term implementation plans and cooperation frameworks among participating countries.

Speaking on the broader continental agenda, a representative of Smart Africa, Aretha Mare, said the initiative aligns with efforts to build a unified digital market.

She noted that policy harmonisation and institutional capacity remain critical to achieving that goal across the organisation’s member states.

Participants also shared insights into their domestic reforms and expectations from the engagement.

An Ethiopian delegate, Deborah Haddis, said her country is focused on strengthening enforcement mechanisms after recently enacting its data protection law.

“We are here to learn from Nigeria’s experience, particularly on implementation,” she said.

Similarly, a representative from The Gambia, John Charles Nje, said the exchange would help build capacity for countries still developing their regulatory frameworks.

He noted that Nigeria’s model provides practical lessons for emerging data protection authorities.

The programme will move to Kenya for its second phase, where participants are expected to consolidate lessons and strengthen collaboration towards building a more secure and trusted digital ecosystem across the continent.