Makes insurance decisions, in Nigeria
Each law's tag says when it binds: since in force proposed proposed
Nigeria Data Protection Act, 2023 and GAID 2025, automated decisionssince 1 line
GAID 2025, art. 43(2)(a), under the Nigeria Data Protection Act, 2023 (automated decisions) · Read the law's page
- Give a data subject the right not to be subject to a decision based solely on automated processes or algorithms.
Nigeria Data Protection Act, 2023, sensitive personal data and a child's datasince 5 lines
Nigeria Data Protection Act, 2023, sensitive personal data and a child's data (GAID 2025, arts. 18 and 43) · Read the law's page
- Obtain a data subject's consent before processing sensitive personal data, and before processing the personal data of a child.
- Do not seek, give or accept consent in any circumstance that may propagate atrocities, hate, child rights violations or criminal acts.
- Where you deploy an emerging technology such as artificial intelligence, the Internet of Things or blockchain to process personal data, set technical and organisational parameters that take account of safeguards for sensitive personal data, safeguards for child rights and other vulnerable groups, the right against solely automated decisions, the right to be forgotten, cross-border data flows, and privacy by design and by default.
- Document those parameters and file them with the Commission as part of your Compliance Audit Returns, with an impact assessment that weighs disparate outcomes of the processing and the Data Subjects' Vulnerability Indexes in Schedule 6.
- State in your Compliance Audit Returns whether you rely on consent for any of the activities article 18 lists.
Cybercrimes (Prohibition, Prevention, etc.) Act, 2015, as amended in 2024, Reporting of Cyber Threats to the National CERTin force3 lines
Cybercrimes (Prohibition, Prevention, etc.) Act, 2015, section 21, Reporting of Cyber Threats, as amended by the Cybercrimes (Prohibition, Prevention, etc.) (Amendment) Act, 2024 · Read the law's page
- This binds any person or institution, whether public or private, that operates a computer system or a network in Nigeria; there is no sector or size gate.
- Immediately inform the National Computer Emergency Response Team (CERT) Coordination Center, through your sectoral CERT or sectoral Security Operations Centre, of any attack, intrusion, or other disruption liable to hinder the functioning of another computer system or network.
- Report the incident to the National CERT within 72 hours of its detection. Failing to do so is itself an offence, punishable by denial of internet services and a mandatory fine of N2,000,000 payable into the National Cyber Security Fund.
National Artificial Intelligence and Robotic Sciences (Establishment) Bill (HB 601)proposed0 lines
HB 601, 10th National Assembly, House of Representatives, introduced October 2023
Control of Usage of Artificial Intelligence Technology in Nigeria Bill (HB 942)proposed2 lines
HB 942, 10th National Assembly, House of Representatives, introduced
- This measure is in committee and binds nobody yet; what follows is what it would require if it is enacted in this form.
- Disclose when AI is used to make a consequential decision.
A Bill for an Act to Regulate the Development, Deployment, and Use of Artificial Intelligence in Nigeria and for Related Mattersproposed0 lines
National Assembly of Nigeria, Bill for an Act to Regulate the Development, Deployment, and Use of Artificial Intelligence in Nigeria and for Related Matters, filed with the National Institute for Legislative and Democratic Studies (NILDS)