Advancing Digital Diplomacy: Dr. Olatunji Meets Nigeria’s UN Rep, Pushes for Harmonised Data Laws

Dr. Vincent Olatunji, the National Commissioner and CEO of the Nigeria Data Protection Commission (NDPC), recently met with Nigeria's Permanent Representative to the United Nations to advocate for the harmonization of global data protection laws. This strategic engagement underscores Nigeria's commitment to strengthening its digital diplomacy and fostering a secure, trustworthy global digital economy. The initiative aims to streamline cross-border data transfers, enhance international cooperation on data governance, and ensure that Nigeria's robust domestic data protection framework, enshrined in the Nigeria Data Protection Act (NDPA) 2023, aligns with international best practices. Harmonized data laws are crucial for attracting foreign investment, boosting digital trade, and protecting the fundamental rights of data subjects in an increasingly interconnected world.

In an era defined by rapid digital transformation and escalating cross-border data flows, the imperative for robust and harmonized data protection frameworks has become a cornerstone of international relations and economic development. Against this backdrop, Dr. Vincent Olatunji, the National Commissioner and Chief Executive Officer of the Nigeria Data Protection Commission (NDPC), recently engaged with Nigeria's Permanent Representative to the United Nations. The core agenda of this high-level meeting was to champion the cause of harmonized data laws on the global stage, reflecting Nigeria's proactive stance in shaping the future of digital governance.

Nigeria has made significant strides in establishing a comprehensive legal framework for data protection, culminating in the enactment of the Nigeria Data Protection Act (NDPA) 2023. This landmark legislation, assented to by President Bola Ahmed Tinubu on June 12, 2023, replaced the earlier Nigeria Data Protection Regulation (NDPR) 2019, providing a statutory framework with clear legal authority for enforcement actions. The NDPA 2023 established the Nigeria Data Protection Commission (NDPC) as the apex regulatory authority, tasked with safeguarding the fundamental rights and freedoms of data subjects, promoting secure data processing practices, and strengthening the legal foundations of the national digital economy. The Commission further issued the General Application and Implementation Directive (GAID) 2025, which provides comprehensive and binding directives for implementing the NDPA. Globally, the landscape of data protection has been significantly influenced by pioneering legislation such as the European Union's General Data Protection Regulation (GDPR), which has set a high benchmark for data privacy rights and inspired similar frameworks worldwide. Recognizing the inherently cross-border nature of data, regional bodies in Africa have also sought to establish harmonized approaches. Notable among these are the African Union Convention on Cyber Security and Personal Data Protection, also known as the Malabo Convention, adopted in 2014 to address cybercrime and data protection across the continent, and the ECOWAS Supplementary Act on Personal Data Protection, which obligates member states to establish national legal frameworks and data protection authorities.

The NDPC's advocacy for harmonized data laws at the United Nations level is a strategic move with multifaceted implications for Nigeria's digital diplomacy and economic aspirations. Dr. Olatunji has consistently highlighted that robust data protection and privacy are vital for emerging technologies, emphasizing benefits such as strengthened credibility in the international community, boosted customer confidence, encouragement of innovation, support for ethical AI development, enhanced operational efficiency, and the creation of a resilient digital ecosystem that attracts investment and fosters long-term global partnerships. This aligns with Nigeria's broader efforts in digital diplomacy, as evidenced by the Federal Ministry of Foreign Affairs' launch of a Cyber Diplomacy Unit. This unit is mandated to champion ethical and inclusive digital governance, build strong public and private partnerships for national cyber resilience, and amplify Nigeria's voice in global cyberspace governance.

The push for harmonization also resonates with the United Nations' increasing focus on data governance. The UN System Chief Executives Board (CEB) has adopted "Proposed Normative Foundations for International Data Governance," which seeks to guide responsible data use and support global cooperation, emphasizing goals of Value, Trust, and Equity. This framework acknowledges the growing awareness of the importance of individuals and communities having agency over their data and of global governance structures prioritizing human rights. However, achieving true harmonization presents significant challenges, given the diverse legal systems, national interests, and varying levels of technological development across countries. The fragmented regulatory landscape can lead to complexities for businesses engaged in cross-border data transfers, necessitating a global mindset for data privacy management.

Nigeria's engagement at the UN builds upon existing regional efforts towards data protection harmonization. The Malabo Convention, which entered into force in June 2023, provides a framework for harmonized data processing and cross-border transfers within the African Union, requiring member states to develop compatible legal and institutional frameworks. Similarly, the ECOWAS Supplementary Act on Personal Data Protection is a binding legal instrument that has led to more harmonized national data protection laws across its member states, including Nigeria. By leveraging these regional foundations and actively participating in global dialogues, Nigeria aims to ensure that its domestic data protection standards are not only robust but also interoperable with international norms, thereby facilitating secure and trusted data flows essential for its digital economy.

The proactive engagement by Dr. Olatunji and the NDPC to advocate for harmonized data laws at the United Nations signifies a critical step in Nigeria's journey towards becoming a leading player in the global digital economy. For legal practitioners, this development underscores the increasing importance of understanding not only domestic data protection legislation like the NDPA 2023 and GAID 2025 but also the intricate web of international and regional data governance frameworks. The drive for harmonization, while challenging, promises to simplify compliance for businesses operating across borders and enhance trust in digital transactions.

Practitioners must closely monitor ongoing international discussions and Nigeria's diplomatic efforts in this space, as future developments will undoubtedly impact cross-border data transfer mechanisms, compliance obligations, and the overall regulatory landscape. Advising clients on robust data governance strategies that anticipate global convergence, leverage international best practices, and ensure adherence to evolving standards will be paramount. Nigeria's commitment to advancing digital diplomacy through harmonized data laws positions it to attract further investment, foster innovation, and secure its place in the global digital future.