Artificial intelligence has moved from a peripheral technology concern to a core legal and regulatory question in Nigeria. The framework governing how Al systems are built, deployed, and regulated is taking shape and the window between the current moment and mandatory compliance is shorter than most businesses and practitioners have recognised.
The Regulatory Direction of Travel
Nigeria does not yet have a dedicated Al statute in force. But the legislative and policy architecture being constructed around Al in Nigeria in 2026 signals the direction with sufficient clarity to demand present attention.
The federal government published Nigeria’s
National Artificial Intelligence Strategy, establishing a policy framework for Al governance that positions the National Information Technology Development Agency as the primary body with oversight responsibility for Al deployment and governance in Nigeria. The Strategy identifies key sectors requiring early Al governance attention; financial services, healthcare, education, and public administration and commits to a regulatory approach that balances Al-driven innovation with accountability, transparency, and human rights protection.
The National Digital Economy and E-Governance Bill, expected to be enacted in 2026, introduces explicit statutory regulation of Al. Under the Bill’s proposed framework, NITDA would be designated as a super-regulator with the following powers: classification of Al systems by risk level; mandating transparency and explainability requirements for high-risk Al deployments; accreditation of Al auditors authorised to certify Al systems; and enforcement powers against non-compliant operators.
The NBA Guidelines on Al in Legal Practice
In 2024, the Nigerian Bar Association issued Guidelines for the Use of Artificial Intelligence in the Legal Profession; the first formal guidance from a Nigerian professional regulatory body on the deployment of Al tools in professional practice. The Guidelines establish several principles that every Nigerian legal practitioner using Al must understand:
Al supports professional judgment, it does not replace it: The use of Al tools for legal research, document draftina. contract review. or due diligence does not transfer professional responsibility from the lawyer to the tool. The practitioner remains fully responsible for the accuracy, completeness, and appropriateness of any work product, regardless of how it was produced.
Confidentiality obligations apply in full: Client information submitted to Al platforms; whether for research, drafting, or analysis, it is subject to the same confidentiality obligations that apply to any other form of client communication. Practitioners must assess the data handling practices of Al platforms before submitting any client-related information.
Accuracy and transparency: Practitioners are responsible for verifying the accuracy of Al-generated output before relying on it in legal work.
Al-generated citations, case summaries, and statutory analyses must be independently verified. Presenting Al-generated content without verification to a client or a court without appropriate disclosure may constitute a breach of professional obligations.
Ongoing obligations: The NBA Guidelines make clear that professional obligations do not diminish with the adoption of technology. They are simply carried into a new context and that context requires additional vigilance rather than reduced attention.
AI Governance for Businesses: The Intersecting
Frameworks
For businesses deploying Al in Nigeria, the governance obligations are not confined to the Al-specific framework being built around the NITDA.
They intersect with several existing regulatory frameworks in ways that create present compliance obligations.
Data protection: Every Al system that processes personal data which includes virtually every consumer-facing Al application, must comply with the Nigeria Data Protection Act 2023 and the GAID
2025. This includes the lawful basis requirements for data processing, the data subject rights framework, the data minimisation principle, and the restrictions on transfers of personal data outside Nigeria. The data used to train, validate, and operate an Al system is subject to these requirements in the same way as data used in any other processing context.
Financial services: The CBN, SEC, and FCCPC have all signalled expectations around Al-assisted decision-making in financial services. Fintechs using Al for credit scoring must be able to demonstrate algorithmic fairness; that the model does not discriminate against protected categories of applicants. The FCCPC’s consumer protection mandate applies with full force to decisions made by automated systems, and the absence of human oversight of a discriminatory Al outcome does not provide a defence.
Employment: Al tools used in hiring, performance assessment, or disciplinary processes engage Nigerian employment law obligations. An Al-assisted termination decision must still comply with the procedural requirements of the employment contract and the standards of the National Industrial Court. Automation does not insulate the employer from the consequences of a wrongful termination.
The Child Online Safety Dimension
An Al-adjacent development worth noting for businesses operating in the digital economy is the anticipated enactment of the Child Online Access and Protection Bill in 2026. The Bill, which has been moving through the legislative process, introduces explicit regulation of Al systems and digital platforms that interact with children; including requirements for age verification, content moderation, and the protection of children’s personal data. For digital businesses whose products or services are accessible to minors, this Bill introduces a specific additional compliance obligation.
What Businesses and Practitioners
Should Do Now
• Map all Al systems currently deployed in the business against their data processing activities and assess compliance with the NDPA 2023 and GAID 2025
• Assess the algorithmic fairness and transparency of Al systems used in consumer-facing decisions; credit scoring, pricing, hiring, content moderation
• Establish human oversight mechanisms for high-stakes Al decisions; termination, credit denial, fraud flags to ensure accountability and compliance with applicable legal standards
• Legal practitioners should review all Al tools in use against the NBA Guidelines, confirm that confidentiality obligations are being met and that Al-generated output is being independently verified
• Monitor the progress of the National Digital Economy and E-Governance Bill through the National Assembly and begin assessing its compliance implications for specific Al deployments
• Brief the board on Al governance as a corporate risk not a technology department concern
Conclusion
Artificial intelligence governance in Nigeria is moving from policy aspiration to regulatory requirement. The statutory framework is being built, the professional guidelines are in place, and the intersecting obligations under data protection, financial services, and consumer protection law are already enforceable.
Businesses and legal practitioners that engage with the Al governance question now, building compliance frameworks, establishing oversight mechanisms, and monitoring the legislative development will be ahead of a compliance obligation that is approaching with speed.