Nigeria has called for the harmonisation of data protection and privacy laws across Africa to enhance trust, enable secure cross-border data flows and strengthen the continent’s digital economy.

Vincent Olatunji, the national commissioner of the Nigeria Data Protection Commission (NDPC), said this during the data protection cross-regional peer exchange visit in Abuja.

The NDPC, in collaboration with the World Bank and Smart Africa, is hosting delegations from nine African countries for the event.

The countries are Gambia, Burundi, Sierra Leone, Malawi, Zambia, Kenya, Ethiopia, Liberia and Somalia.

Mr Olatunji said Nigeria had built a functional and effective data protection ecosystem that was now attracting global attention, noting that African countries must deepen cooperation to achieve similar progress.

“What we have in Nigeria now is an ecosystem that is effective, and the whole world is looking at what we are doing and how we are getting it right.

“What we are now doing is to encourage African countries to cooperate, engage in peer review, and learn from one another, especially those just setting up their data protection authorities or frameworks,” he said.

He emphasised that the foundation of digital trade and cooperation, particularly under the African Continental Free Trade Area (AfCFTA), was the protection of personal data.

According to him, there is a need to ensure that personal data of Africans and legal residents can be transferred securely across borders with adequate safeguards.

“We must ensure that countries receiving data have enforceable privacy laws, effective data protection authorities and guaranteed data subject rights to build trust in cross-border data exchange,” he said.

Mr Olatunji added that there was a need for African countries to develop indigenous technologies to drive implementation of data protection laws and build strong systems.

He also called for more awareness creation, devising means of self-evaluation, ensuring capacity building, and deploying of public-private partnerships for data protection.

Also speaking, Aretha Mare, unit manager, Data and Security Infrastructure and Governance at Smart Africa, said the workshop focused on practical solutions for building effective data protection institutions.

“We want this peer exchange to strengthen operations so that when risks cross borders, responses can be automated, timely and credible,” she said.

She encouraged participants to utilise Smart Africa’s platforms for continuous learning through courses, communities of practice and knowledge exchange.

Elena Gasol, senior counsel, data and trade, World Bank, said the initiative was designed to help countries transition from having data protection laws on paper to effective institutional implementation.

Ms Gasol said participating countries were at different stages, with some still operationalising legal frameworks, while others like Nigeria were already handling complex compliance and enforcement issues.

“The goal is to create a space for peer-to-peer exchange where authorities can share what works, challenges faced, and lessons learnt.

“We expect concrete outcomes, including measurable 90-day implementation commitments and cooperation offers among participating countries,” she said.

A delegate, Deborah Haddis, stakeholder engagement advisor, Ethiopian Communication Authority, said her country is in the early stages of implementing its data protection framework following the passage of its law in 2024.

“We are here to learn from Nigeria’s experience, particularly on enforcement and implementation, as we continue to build our institution,” she said.

Similarly, John Nje, vice-chairman of the Information Commission of The Gambia, said his country’s data protection law, passed in September 2025, was still in its infancy.

“We are here to learn from more experienced countries like Nigeria and exchange ideas that will help us build capacity to implement our law effectively,” he said.

The programme, supported under the World Bank-financed West Africa Regional Digital Integration Project (WARDIP), is designed to promote cross-regional learning and strengthen regulatory capacity across Africa.

The initiative focused on key areas such as regulatory development, institutional capacity building, enforcement mechanisms, data protection tools, and strategic planning.

(NAN)