The Nigerian National Assembly has officially signaled an urgent review of the National Data Protection Act (NDPA) 2023, moving to include Mandatory Algorithmic Impact Assessments (MAIA). This 90-day “compliance sprint” marks a pivotal shift from passive “paper compliance” to active technical audits, forcing organizations to prove that their AI models do not harbor bias or compromise the data sovereignty of Nigerian citizens.
From Privacy to Algorithmic Accountability
While the original NDPA focused on data collection and storage, the 2026 amendments address the “black box” of Artificial Intelligence. Rapidly evolving cyber threats and the global push for AI safety—exemplified by the United Nations Convention on Cybercrime—have made the current framework insufficient. Lawmakers now argue that because data is “Nigeria’s next oil,” the algorithms processing that data must be subject to the same level of environmental and safety scrutiny as physical infrastructure.
Why It Matters
For the Techrectory audience, this amendment transforms AI from a purely technical pursuit into a high-stakes legal one. Organizations failing to submit annual impact assessments or risk mitigation strategies face staggering penalties: up to ₦10 million or 2% of annual revenue. This move effectively classifies AI systems by risk level, placing stricter scrutiny on sensitive sectors like finance, public administration, and recruitment. 
Concluding Thoughts
The National Assembly’s intervention signals that the “Wild West” of unregulated AI in Nigeria is over. By embedding mandatory technical audits into the NDPA, Nigeria is positioning itself as an African leader in digital sovereignty. For tech leaders, the mandate is clear: if you are building in the cloud, you must now be ready to show your work on the ground.
Explore more stories on startups, funding, and innovation across Africa in our Startups & Funding section.
