NIGERIA is hosting data protection regulators from across Africa in Abuja as part of renewed efforts to strengthen cross-border data security and improve how countries protect personal information in the digital space.

The engagement, led by the Nigeria Data Protection Commission in partnership with the World Bank and Smart Africa, brings together regulators from nine countries, including The Gambia, Burundi, Sierra Leone, Somalia, Liberia, Malawi, Zambia, Ethiopia and Kenya.

It also includes regional bodies such as the Economic Community of West African States, Economic and Monetary Community of Central Africa and Intergovernmental Authority on Development, reflecting a broader push for coordinated data governance across Africa.

Speaking at the opening session, NDPC National Commissioner, Vincent Olatunji, said Nigeria’s experience shows the importance of moving from legislation to implementation in data protection.

He said Nigeria’s progress was anchored on the Data Protection Act signed in 2024 by President Bola Tinubu, which enabled the country to build a structured regulatory ecosystem.

“What we have in Nigeria today is an ecosystem that works. Other countries are interested in how we got here, and we are also learning from them,” he said.

Olatunji added that Nigeria has developed indigenous digital tools for registration, licensing, and compliance monitoring, stressing the importance of homegrown solutions in strengthening data sovereignty.

He explained that the focus of the exchange is cross-border data transfer, especially under the African Continental Free Trade Area framework, where trust and legal safeguards are critical.

“We are looking at how personal data can move across countries safely, with proper safeguards and enforceable rights,” he said.

Providing a broader perspective, Senior Counsel at the World Bank, Elena Gasol, said Africa’s challenge is no longer the absence of data protection laws but the ability to enforce them effectively.

She said the programme is designed as a practical peer-learning platform rather than a theoretical training, allowing regulators to share real-world experiences.

Gasol noted that many countries are now transitioning from legislation to enforcement and institutional maturity.

“The main gap now is institutional capacity, how to enforce laws, handle complaints, and build public trust,” she said.

She added that the exchange is expected to produce measurable outcomes, including short-term implementation commitments and cooperation frameworks between participating regulators.

A representative of Smart Africa, Aretha Mare, said the initiative aligns with efforts to build a single digital market across Africa, where trust and interoperability are key.

“Data protection is central to building trust in Africa’s digital economy,” she said.

Participants also shared their experiences, with many acknowledging Nigeria’s growing role as a reference point in data protection enforcement.

An official from Ethiopia, Deborah Haddis, said her country is still building its enforcement structures following the passage of its data protection law.

“We are here to learn from Nigeria’s experience in implementation and enforcement,” she said.

Similarly, a representative from The Gambia, John Charles Nje, said the exchange would help strengthen institutional capacity in countries where data protection frameworks are still developing.

The meeting is coming at a time Nigeria is grappling with a wave of cyber incidents affecting both public and private institutions.

In recent weeks, the Nigeria Data Protection Commission has launched investigations into alleged breaches involving key digital platforms, including payment systems and corporate databases, raising fresh concerns about the security of sensitive data in the country.

One of the most significant recent cases involves a reported breach at the Corporate Affairs Commission (CAC), where millions of corporate records were allegedly exposed, prompting regulatory scrutiny and reinforcing concerns about systemic vulnerabilities in Nigeria’s digital infrastructure.

Against this backdrop, the peer exchange is aimed at strengthening enforcement capacity, improving institutional coordination, and building trust in cross-border digital transactions