Nigerian Rights Group Threatens Lawsuit Over Data Protection Amendment Bill

A Nigerian civil society group has threatened to sue the National Assembly over a bill that would require social media platforms and data processors to maintain physical offices in the country. The Socio-Economic Rights and Accountability Project stated in a July 18, 2026 letter that the Nigeria Data Protection (Amendment) Bill, 2026 would empower the Nigeria Data Protection Commission to prohibit operations of any entity that does not comply within 30 days.

The organization argued that the measure would amount to an indirect restriction on digital communication without judicial oversight.

The legislation would compel social media platforms, data controllers, and data processors operating in Nigeria to establish local offices. Non-compliance after 30 days would allow the NDPC to shut down or bar the entity from operating. The group said the bill contains no requirement for prior judicial authorization and no obligation to consider less restrictive alternatives.

The organization maintained that the proposed powers could not meet the standards of Section 45 of the Nigerian Constitution, which requires restrictions on fundamental rights to be prescribed by law, pursue a legitimate aim, and be reasonably justifiable in a democratic society.

It cited Section 39 of the Constitution, Article 19 of the International Covenant on Civil and Political Rights, and Article 9 of the African Charter as protecting freedom of expression and access to information. The group referenced a prior ECOWAS Court of Justice ruling that found the Federal Government's 2021 suspension of Twitter infringed rights to freedom of expression and media freedom.

The organization warned that mandatory local offices could raise compliance costs for technology firms, start-ups, and educational institutions. It said the measure could conflict with the Nigeria Startup Act 2022 and the National Digital Economy Policy and Strategy.