Nigeria is moving toward one of Africa's most comprehensive AI regulatory frameworks, consolidating years of legislative efforts into bills that would establish a national AI commission, require foreign tech companies to store data locally, and create new funding mechanisms for domestic AI research. After introducing multiple AI-related bills between 2021 and 2024 without completion, Nigeria consolidated these proposals in December 2024 for second reading in Parliament. In 2025, the country introduced two major pieces of legislation: the National Artificial Intelligence Commission (Establishment) Bill and the Nigeria Digital Sovereignty and Fair Data Compensation Bill, signaling a shift from fragmented approaches to coordinated governance .

What Makes Nigeria's Approach Different From Europe's AI Act?

While the European Union's AI Act focuses on classifying AI systems by risk level and imposing obligations on developers, Nigeria's framework takes a more sovereignty-focused approach. The National Digital Economy and E-Governance Bill, a foundational statute for Nigeria's digital infrastructure, would position the National Information Technology Development Agency (NITDA) as the central authority regulating AI systems in both public and private sectors . Unlike Europe's risk-based classification system, Nigeria's bill empowers NITDA to develop regulations by considering the purpose and context of AI use, the nature of its application, potential damages, reversibility of effects, autonomy levels, and human oversight possibilities .

The most distinctive element is the Digital Sovereignty and Fair Data Compensation Bill, which targets foreign digital companies generating revenue from Nigerian users. This bill requires that all data belonging to Nigerian users collected by foreign companies be stored and processed within Nigeria, with mandatory local data centers or mirror servers . It also mandates that cross-border data transfers receive approval from NITDA, supported by proof of compliance with Nigeria's data security laws.

How Would Nigeria's AI Regulation Framework Actually Work?

• Regulatory Sandbox: The National Digital Economy and E-Governance Bill would establish a formal regulatory sandbox allowing companies to test new AI-driven products and services within a controlled environment subject to oversight and predefined safeguards, giving regulators early visibility into emerging technologies and associated risks .
• Enforcement Powers: NITDA would be authorized to conduct compliance audits, accredit AI auditors, require corrective measures, suspend AI systems deemed to pose imminent risks, and impose administrative penalties ranging from fines up to 10 million Nigerian Naira (approximately $7,332) or up to 2% of an entity's preceding annual gross revenue in Nigeria .
• Data Localization Requirements: Foreign digital companies using Nigerian data to train AI models would be required to contribute 2% of their annual revenue from Nigeria to a newly established Nigeria AI Development Fund, and ensure that at least 30% of their AI research and development using Nigerian data is conducted within the country .
• Risk-Based Governance: Rather than prescriptive rules, NITDA would develop regulations considering factors like the purpose of AI use, likelihood and severity of potential damages, reversibility of effects on affected persons, degree of autonomy, and possibilities for human oversight or intervention .

Financial sanctions under the Digital Sovereignty and Fair Data Compensation Bill would range from 10% of annual Nigerian turnover to 1 billion Nigerian Naira (approximately $733,259), creating significant incentives for compliance .

Why Is Data Localization Such a Big Deal for AI Companies?

The data localization and AI training obligations in Nigeria's bills would require fundamental changes to how AI systems are architected, how data flows through pipelines, and how vendor relationships are structured. Companies would need to assess whether their AI models rely on Nigerian data and determine whether they can feasibly establish local infrastructure . This creates a practical challenge: many global AI companies operate on centralized data architectures designed for efficiency, not geographic fragmentation. Nigeria's approach mirrors similar sovereignty-focused regulations emerging across Africa, with Angola, Egypt, Kenya, and Morocco having adopted national AI strategies and policy frameworks .

The bills also raise potential conflicts with Nigeria's existing Data Protection Act (NDPA), which permits cross-border data transfers based on adequacy decisions and appropriate safeguards without requiring prior authorization from a regulatory authority. Privacy professionals will need to navigate this tension carefully by paying close attention to the purpose of data transfers and the context of data use, ensuring that any required approvals for cross-border transfers are obtained where applicable .

What Should AI Governance Professionals Watch Closely?

Both bills make clear that NITDA will be at the forefront of AI regulation in Nigeria, with the Data Protection Commission playing an active but secondary role. This requires close monitoring of NITDA's activities, guidance notes, and AI-related regulations as they develop . Privacy and AI professionals should seek guidance on several emerging areas: how NITDA will classify AI risks, what audit expectations will look like, and what transparency requirements will apply after the bills take effect.

The consolidation of Nigeria's multiple AI bills into a coherent framework reflects a broader African trend toward proactive AI governance. Unlike some regions that have adopted a wait-and-see approach, Nigeria is positioning itself as a regional leader in establishing clear rules for AI development and deployment. The bills signal that African nations are not content to simply adopt European or American regulatory models, but are instead crafting approaches that reflect their own economic priorities, data sovereignty concerns, and development goals .