Communications policy
Regulatory and institutional structureSummarise the regulatory framework for the communications sector. Do any foreign ownership restrictions apply to communications services?
Nigeria’s communications sector is primarily regulated by the Nigerian Communications Act (NCA) and the Wireless Telegraphy Act (WTA). The NCA established the Nigerian Communications Commission (NCC), which is charged with the responsibility of regulating the communications sector. The Minister of Communications and Digital Economy (the Minister) under the NCA is vested with the responsibilities of the formulation, determination and monitoring of the general policy for the communications sector in Nigeria with a view to ensuring, among other things, the utilisation of the sector as a platform for the economic and social development of Nigeria, the negotiation and execution of international communications treaties and agreements, on behalf of Nigeria, between sovereign countries and international organisations and bodies, and the representation of Nigeria, in conjunction with the NCC, at proceedings of international organisations and on matters relating to communications. Under the NCA, the NCC is authorised to make and publish regulations and guidelines insofar as it is necessary to give effect to the full provisions of the NCA among other reasons.
The WTA sets out the framework for regulating the use of wireless telegraphy in Nigeria.
Foreign ownership restriction does not apply to the provision of communications services in Nigeria as a company with foreign ownership, as long as it is incorporated in Nigeria, is eligible to apply for a licence to provide communications services. Under the Nigerian Investment Promotion Commission Act, a foreign national can own up to 100 per cent of a business or can invest in any business except those on the negative list. None of the communications services authorised in Nigeria is on the negative list.
Authorisation/licensing regimeDescribe the authorisation or licensing regime.
Under the NCA, there are two broad licensing frameworks:
- an individual licence, which is a type of authorisation in which the terms, conditions and obligations, scope and limitations are specific to the service being provided. The NCC may issue an individual licence by auction through a first come, first served beauty contest or through standard administrative procedure. Presently, there are 26 licence types in the individual licence category. Some of the activities authorised by an individual licence are internet services, fixed wireless access, unified access services, electronic directory services, internet exchange, international gateway, international cable infrastructure and landing station services, collocation services and commercial basic radio communications network services; and
- a class licence, which is a type of general authorisation in which the terms and conditions or obligations are common to all licence holders. It requires only registration with the NCC for applicants to commence operation. Some of the services subject to a class licence are sales and installation of terminal equipment (including mobile cellular phones and HF, VHF, UHF radio, etc), repairs and maintenance of telecoms facilities, cabling services, telecentres, cybercafes and the operation of public payphones.
In terms of issuing a licence by an administrative procedure, an entity intending to carry out a service subject to an individual licence shall apply to the NCC in the prescribed form upon the payment of the processing or administrative fee (usually 5 per cent of the licence fee) and the licence fee, while a person intending to operate under a class licence is to submit a registration notice in the prescribed form and a registration fee of 10,000 naira to the NCC. In accordance with the NCA, a licence applicant must receive a response to the application within 90 days of submitting it. However, an offer letter is normally issued to applicants for a class licence if the application is complete. For individual licences, depending on the service and completeness of the required information, the conclusion of the process can take between four and 12 weeks. The duration of a licence depends on the type of service authorised or spectrum licensed.
The national carrier licence and international gateway licence are valid for 20 years. The unified access service licence is valid for a term of 15 years, while a digital mobile licence (DML) authorising the use of a specified mobile spectrum is valid for a term of 15 years. On the other hand, an internet service, paging, prepaid calling card and special numbering services licence are all valid for a term of five years. The licence fees payable depends on the type of service. Fees payable are fixed by the NCC and published on its website. In addition to licence fees, a prospective licensee is required to pay an administrative charge and, upon grant of the licence, a licensee shall pay an annual operating levy calculated on the basis of net revenue for network operators and gross revenue for non-network operators.
Fixed, mobile and satellite services are regulated and licensed under the NCA and to operate any of these services a licence must be obtained from the NCC. As these services are operator-specific, they fall under the individual licence category. In Nigeria, mobile telecommunications services are differentiated on the basis of whether the operator is authorised by a DML, fixed wireless access licence (FWAL) or unified access service licence. A DML authorises an operator to use appropriate equipment in a designated part of the electromagnetic spectrum and permits it to operate a network for the provision of public telecommunications services. In 2001, the NCC licensed four spectrum packages in the 900 megahertz (MHz) and 1,800MHz bands to Mobile Telecommunications Limited (now Ntel), Econet Wireless Nigeria Limited (now Airtel) and MTN Nigeria Communications Limited for use in the provision of digital mobile services. These were later joined by Etisalat and Globacom. A FWAL authorises an operator to use appropriate equipment in a designated part of the electromagnetic spectrum for a term of five years (with renewal for a further five years) and permits it to operate a network for the provision of public telecommunications service. FWALs are granted on a regional basis to reflect the 36 Nigerian states and the federal capital territory, with operators wishing to achieve national coverage required to obtain licences in each of the licensing regions. In 2002, the NCC, in authorising FWAL services, also offered 42MHz paired in the 3.5 gigahertz (GHz) band, and a total of 28MHz paired in the 3.5GHz band across the 37 licensing regions of Nigeria to 22 new licensees.
In 2007, the NCC introduced the unified access service licence (UASL) scheme and allocated 40MHz of paired spectrum in the 2GHz band in four equal blocks of 10MHz paired spectrum. On the successful allocation of spectrum, the allottees were issued with a spectrum licence and where necessary, a UASL. The UASL authorises the holder to provide both fixed and mobile services including voice and data, and imposes special conditions requiring its holders to build and operate a telecommunications network to provide voice telephony, video services, multimedia services, web browsing, real-time video streaming, video surveillance, network gaming, email, SMS, file transfer, broadband data and location-based services, and other services that may be authorised, and that the 3G network be built and operated according to certain defined technical standards.
For broadband internet services, a wholesale wireless access service licence (WWASL) authorises the holder to construct, maintain, operate and use a network consisting of a mobile communication system, a fixed wireless access telecommunications system, or a combination of any of these systems comprising radio or satellite or their combination, within Nigeria, deployed for providing point-to-point or switched or unswitched point-to-multipoint communications for the conveyance of voice, data, video or any kind of message. The WWASL also authorises the holder to construct, own, operate and maintain an international gateway, while an infrastructure company licence authorises the holder to provide and operate on a wholesale basis an open access metropolitan fibre network within a designated geographical area in Nigeria, in particular, among other things, to construct, maintain and operate fibre optic network facilities.
Commercial satellite services in Nigeria are regulated under the Commercial Satellite Communications Guidelines 2018 issued by the NCC. Under these Guidelines, there are two broad categories of commercial satellite service authorised:
- space segment operators (SSOs); and
- earth station operators (ESOs).
An SSO is authorised by a landing permit to beam its signal from a named geostationary satellite over the territory of Nigeria. The landing permit does not authorise the SSO to provide any other type of communications services directly to the last-mile user other than wholesale communications services to other communications operators licensed to provide services to last-mile users. The ESOs, on the other hand, are authorised under the applicable operational licence issued by the NCC to provide services to last-mile users in Nigeria.
Public Wi-Fi services are authorised pursuant to the Regulatory Guidelines for the Use of 2.GHz ISM Band for Commercial Telecoms Services. Under these Guidelines, Wi-Fi hotspots shall, inter alia, be deployed in the 2GHz industrial, medical and scientific band and must be registered and authorised by the NCC. In addition, commercial Wi-Fi hotspot operators must hold a licence for the provision of internet services.
Flexibility in spectrum useDo spectrum licences generally specify the permitted use or is permitted use (fully or partly) unrestricted? Is licensed spectrum tradable or assignable?
Yes, in line with the Frequency Management Policy, an applicant for a commercial frequency licence from the NCC must also hold a commercial operating licence from the NCC (or must have submitted an application for an operating licence to the NCC). The commercial operating licence authorises the provision of a specific service for which the spectrum is intended to be used. An applicant for a frequency licence may also be given a frequency reservation pending the outcome of the processing of his or her commercial operating licence. However, the frequency licence will be subject to the successful approval of the commercial licence.
Pursuant to the provision of Spectrum Trading Guidelines issued by the NCC, radio frequency spectrum is tradable, provided such transactions comply with the eligibility criteria set out in the Guidelines.
Ex-ante regulatory obligationsWhich communications markets and segments are subject to ex-ante regulation? What remedies may be imposed?
Historically, the NCC has subjected several communications markets to ex-ante regulation. For instance, in 2013, the NCC undertook a detailed study of the level of competition in the Nigerian communications market and identified the following communications markets for the purpose of ex-ante regulation:
Market segment | Sub-segment |
Voice |
|
Data |
|
Upstream segments |
|
Downstream segments |
|
The identified markets were further divided into wholesale and retail sub-segment as follows:
| Upstream segment | Voice segment | Data segment | Downstream segment |
Services provided as wholesale by an operator to other operators | Wholesale broadband access | Wholesale voice termination on voice network |
|
|
Services provided as wholesale by an operator to other operators | Wholesale leased lines and transmission capacity | Wholesale voice termination on fixed network |
|
|
Service provided as retail by each individual operator to its consumers |
| Retail voice access on mobile networks | Retail broadband, internet access on mobile devices | Supply of applications, content and devices |
Service provided as retail by each individual operator to its consumers |
| Retail access on fixed networks | Retail broadband, intern et access on mobile devices at fixed location |
|
Service provided as retail by each individual operator to its consumers |
|
| Retail leased lines |
|
In that study, the NCC determined that MTN held, and Globacom and MTN collectively held significant market power for the mobile voice and upstream segment respectively. As a result of which, the NCC (in exercising its power to remedy market failure and (or) prevent anti-competitive practices under the Competition Practice Regulations) imposed on MTN as the operator with significant market power in the mobile voice market the following obligations:
- accounting separation;
- the collapse of on-net and off-net retail tariffs;
- submission of required details to the NCC; and
- a determination of the pricing principle to address the rates charged for on-net and off-net calls for all operators in the mobile voice market.
In respect of the joint dominance collectively held by Globacom and MTN in the market for the upstream segment, the NCC imposed the following obligations on both operators:
- a price cap for wholesale services and a price floor for retail services as to be determined by the NCC on a periodic basis;
- accounting separation; and
- submission of required details to the NCC.
In October 2014, the NCC reviewed its direction requiring MTN to collapse its on-net and off-net retail tariff, by approving a stipulated differential for MTN’s on-net and off-net call charges.
In addition, pursuant to Regulations 10 –12 of the Telecommunications Networks Interconnection Regulations 2007 issued by the NCC, one or more communications markets relating to interconnection in which a licensee has been declared dominant by the NCC would trigger the application of ex-ante regulatory obligations. In this regard, the dominant licensee would be obligated to:
- meet all reasonable requests for access to its telecommunications network, in particular, access at any technically feasible points;
- adhere to the principle of non-discrimination with regard to interconnection offered to other licensed telecommunications operators, applying similar conditions in similar circumstances to all interconnected licensed operators providing similar services and providing the same interconnection facilities and information to other operators under the same conditions and quality as it provides for itself and affiliates and partners;
- make available on request to other licensed telecommunication operators considering interconnection with its network, information and specifications necessary to facilitate the conclusion of an agreement for interconnection including changes planned for implementation within the next six months, unless agreed otherwise by the NCC;
- submit to the NCC for approval and publish a reference interconnection offer, describing interconnection offerings, broken down according to market need and associated terms and conditions including tariffs; and
- provide access to the technical standards and specifications of its telecommunications network with which another operator shall be interconnected.
In addition, the dominant licensee shall, except where the NCC has determined interconnection rates, set charges for interconnection on objective criteria and observe the principles of transparency and cost orientation. The burden of proof that charges are derived from actual costs lies with the licensed telecommunications operator providing the interconnection service to its facilities. The dominant licensee may set different tariffs, terms and conditions for interconnection of different categories of telecommunications services where such differences can be objectively justified on the basis of the type of interconnection provided.
A dominant licensee shall also:
- give written notice of any proposal to change any charges for interconnection services in accordance with the procedure set out in the guidelines on interconnection adopted by the NCC and the provisions of the operating licence;
- offer sufficiently unbundled charges for interconnection, so that the licensed telecommunications operator requesting the interconnection is not required to pay for any item not strictly related to the service requested;
- maintain a cost-accounting system, which, in the opinion of the NCC, is suitable to demonstrate that its charges for interconnection have been fairly and properly calculated, and provides any information requested by the NCC; and
- make available to any person with a legitimate interest on request, a description of its cost-accounting system showing the main categories under which costs are grouped and the rules for the allocation of costs to interconnection. The NCC, or any other competent body independent of the dominant telecommunications operator and approved by the NCC, shall verify compliance of the dominant telecommunications operator with the cost-accounting system and the statement concerning compliance shall be published by the NCC annually.
Last, if interconnection services are not provided through a structurally separated subsidiary, the dominant licensee shall:
- keep separate accounts as if the telecommunications activities in question were in fact carried out by legally independent companies, to identify all elements of cost and revenue on the basis of their calculation and the detailed attribution methods used;
- maintain separate accounts in respect of interconnection services and its core telecommunications services and the accounts shall be submitted for independent audit and thereafter published; and
- supply financial information to the NCC promptly on request and to the level of detail required by the NCC.
It is also pertinent to note that in 2020, the NCC made a determination to impose mandatory accounting separation obligations on Airtel, EMTS, Globacom, MTN, MainOne Cable and IHS (four mobile network operators, a submarine cable operator and a collocation and infrastructure-sharing provider respectively). Although this determination did not identify (or define) any particular communications market, however, one of the key objectives of the NCC in imposing the accounting separation is to identify and prevent any undue discrimination or practices that substantially lessens competition such as cross-subsidisation, margin squeezes, etc. This determination took effect on 15 July 2020 and the licensees subject to the determination are to commence the full rollout of accounting separation by 1 January 2021. In addition, licensees with an annual turnover in excess of 5 billion naira are also subject to an accounting separation obligation pursuant to the Guidelines on the Implementation of an Accounting Separation Framework issued by the NCC.
Structural or functional separationIs there a legal basis for requiring structural or functional separation between an operator’s network and service activities? Has structural or functional separation been introduced or is it being contemplated?
Under the Federal Competition and Consumer Protection Act 2018 (the Competition Act), the Federal Competition and Consumer Protection Tribunal is empowered, upon receipt of a monopoly report from the Federal Competition and Consumer Protection Commission, to order the division of any undertaking by the sale of any part of its shares, assets or otherwise if the monopoly cannot be adequately remedied under any other provision of the Competition Act or is substantially a repeat by that undertaking of conduct previously found by the Competition Tribunal to be a prohibited practice. In addition, pursuant to the provisions of the Competition Practice Regulations, the NCC in issuing a direction to remedy an abuse of a dominant position or an anticompetitive practice may direct a licensee to make changes in actions or activities including structural separation of services or businesses, as a means of eliminating or reducing the abusive or anti-competitive practice.
Universal service obligations and financingOutline any universal service obligations. How is provision of these services financed?
The Universal Service Provision (USP) Fund established by the NCA is geared towards promoting the widespread availability of network services and applications services by encouraging the installation of network facilities and the provision of network services, application services and broadband penetration in unserved, underserved areas or for underserved groups within the community.
The USP Fund is financed from monies appropriated to the USP Fund by the National Assembly; contributions from the NCC are based on a portion of the annual levies paid by licensees; and gifts, loans, aids and such other assets that may from time to time specifically accrue to the USP Fund. In practice, the USP secretariat created by the NCC is responsible for implementing and executing USP programmes and USP projects. The USP board supervises and provides broad policy directions for the management of the USP Fund.
Number allocation and portabilityDescribe the number allocation scheme and number portability regime in your jurisdiction.
The Numbering Regulations 2008 (the Numbering Regulations) regulates the allocation (or assignment) of numbers. In this regard, the Numbering Regulations provide a regulatory framework for the control, planning, administration, management and assignment of numbers, pursuant to section 128(1) of the NCA. Under the Numbering Regulations, the holder of a communications licence may apply in the prescribed form to the NCC to be assigned numbers (in a set of blocks) by stating:
- the name and contact details of the applicant;
- the licence under which the application is made;
- the services intended to use the assignment;
- the geographic areas for completing calls or transmitting messages to the numbers to be included in the assignment;
- the quantity of numbers requested for inclusion in the assignment;
- any particular blocks requested for inclusion in the assignment;
- the utilisation of the assignment predicted for 12 months after the grant of the assignment;
- the current utilisations of existing assignments to the applicant for the intended services;
- an indication of which, if any, portions of the application are confidential to the NCC;
- any other information that the applicant considers necessary or appropriate to justify the application; and
- any other information that the NCC may, from time to time, require to assess the application.
In making a decision on an application for an assignment, the NCC shall take into account factors including but not limited to:
- any earlier decisions about assignments to the applicant or other licensees for services similar to the intended services;
- any statements in the licence of the applicant about eligibility for providing services or being assigned numbers;
- the usage conditions;
- the digit analysis capabilities of communications networks that are operated in Nigeria;
- the utilisation of the assignment predicted for 12 months after the grant of the assignment over the next three years;
- the current utilisations of existing assignments to the applicant for the intended services; and
- the quantity and fragmentation of blocks that have not been assigned and whether or not the licensee has failed to fulfil an obligation in the Numbering Regulations or the National Numbering Plan, or any other numbering related obligation under the NCA, has committed a contravention of its regulatory obligation.
The Nigerian Mobile Number Portability Business Rules and Port Order Processes (the MNP Business Rules) sets out the regulatory, legal and technical framework for implementing MNP in Nigeria. The NCC has also issued the Mobile Number Portability Regulations 2014 to provide a regulatory framework for the operation of MNP in Nigeria. Under the terms of the MNP Business Rules, MNP is obligatory for all mobile network operators and is currently available across only global systems for mobile networks (although number portability is intended to be implemented in phases that will cover code division multiple access, fixed networks and location).
Under the MNP Business Rules, MNP is ‘recipient led’. To initiate a porting request, the recipient operator would receive a porting request from a subscriber to port their number. The recipient operator, number portability clearinghouse and donor operator then exchange messages to validate the porting request. Porting is free and is normally completed within 48 hours.
A port request, however, can be rejected for a number of reasons including where the number is not included in the Nigerian numbering plan, where the number was ported within the last 90 days, where the number is not registered in the subscriber information database, and where the number is already subject to a pending port request.
Customer terms and conditionsAre customer terms and conditions in the communications sector subject to specific rules?
Yes, the NCA requires each licensee to prepare a consumer code for their respective customers and such consumer code shall be subject to prior approval and ratification by the NCC. The individual consumer code governs the provision of services and related consumer practices applicable to the licensee. Where the NCC designates an industry body to be a consumer forum, any consumer code prepared by such industry body shall be subject to prior approval and ratification by the NCC. A consumer code prepared by a consumer forum, the NCC or licensees shall as a minimum contain model procedures for:
- reasonably meeting consumer requirements;
- the handling of customer complaints and disputes including an inexpensive arbitration process other than a court;
- procedures for the compensation of customers in the case of a breach of a consumer code; and
- the protection of consumer information.
The Consumer Code of Practice Regulation also requires that the individual consumer code after its approval by the NCC be published in at least two national newspapers (or as the NCC may direct), and the approved individual consumer code shall become applicable from the date of its publication. The Consumer Code Regulations are under review by the NCC, and may be amended by the Draft Consumer Code of Practice Regulations 2018 if eventually approved.
The provisions of the Competition Act, the NCA and (or) the Competition Practice Regulations may limit the application of certain customer terms and conditions deemed to be undermining consumer rights or anticompetitive in the communications sector. Also, the Enforcement Processes Regulations require every licensee to submit the contents and representations contained in any promotions of products or services to the NCC for its prior approval. Failure to obtain the required approval shall constitute a contravention under these Regulations.
Net neutralityAre there limits on an internet service provider’s freedom to control or prioritise the type or source of data that it delivers? Are there any other specific regulations or guidelines on net neutrality?
The Internet Industry Code of Practice (the Internet Code) issued by the NCC on 26 November 2019 sets out the obligation of an internet access service provider (IASP) regarding the control and (or) prioritisation of the data that it delivers and other obligations regarding net neutrality. In this regard, the Internet Code inter alia:
- prescribes measures that seek to guarantee the rights of internet users to an open internet;
- imposes specific transparency obligation on IASPs with respect to performance, technical and commercial terms of its internet access service in a manner that is sufficient for consumers and third parties to make informed choices regarding their uses of such services;
- imposes a positive obligation on IASPs when providing internet access service, to treat all traffic equally, without discrimination, restriction or interference, independently of its sender or receiver, content, application or service, or terminal equipment;
- bars IASPs from blocking lawful content on the internet, unless under the condition of reasonable network management;
- bars IASPs from degrading or impairing lawful internet traffic unless under the condition of reasonable network management;
- bars IASPs from engaging in paid-prioritisation;
- prescribes the circumstance in which zero-rating is permissible; and
- sets out circumstances that warrant the use of reasonable network management practices.
In addition, the Guidelines for the Provision of Internet Service, the licence for the provision of internet service, the UASL and the WWASL do, however, impose some non-discriminatory obligations on an IASP and holders of these licences. In this regard, an IASP and the respective licensees are required not to show (whether in respect of charges or other terms or conditions applied or otherwise) undue preference to or to exercise undue discrimination against any particular person in respect of the provision of a service or the connection of any equipment approved by the NCC.
Platform regulationIs there specific legislation or regulation in place, and have there been any enforcement initiatives relating to digital platforms?
Except for the Framework and Guidelines for the Use of Social Media Platforms in Public Institutions that provide guidance on the use of social media within a public institution’s communications’ environment issued by the National Information Technology Development Agency (NITDA) in January 2019, there is no specific legislation or regulation in respect of digital platforms.
However, the NCC in its Strategic Management Plan for 2020 – 2024 has indicated an intention to develop a framework for regulating over-the-top services and platforms.
Next-Generation-Access (NGA) networksAre there specific regulatory obligations applicable to NGA networks? Is there a government financial scheme to promote basic broadband or NGA broadband penetration?
Yes, in addition to the application of regulatory obligations ordinarily applicable to other categories of communications licensees, the holder of the WWASL will be required by the licence to, among other obligations, roll out services at least as follows:
- three state capitals in year one;
- four additional state capitals in year two;
- six additional state capitals in year three;
- 12 additional state capitals in year four;
- 12 additional state capitals in year five; and
- two-thirds of all local government headquarters in the remaining licence period.
Also, a WWASL requires the holder to supply customer premises equipment adapted in such a way as to reasonably accommodate the needs of hearing-impaired individuals.
Notwithstanding the application of the USP fund for the facilitation of broadband penetration in Nigeria, there are other NCC-initiated projects such as the Wire Nigeria project aimed at facilitating the rollout of fibre-optic cable infrastructure in which subsidies are based on per kilometre of fibre and incentives to encourage the rapid deployment of non-commercially viable routes are provided. The State Accelerated Broadband Initiative is aimed at stimulating the demand for internet services and driving affordable home broadband prices where subsidies on terminal equipment based on broadband infrastructure deployed in state capitals and urban and semi-urban centres are provided to operators. Also, under the ongoing Open Access Model for Next Generation Fibre Optic Broadband Network, there shall be a one-off government financial support to facilitate the rollout of the infrastructure companies. This 65 billion naira financial support will be based on meeting pre-identified targets at certain points in time during the rollout of the broadband infrastructure phase.
Data protectionIs there a specific data protection regime applicable to the communications sector?
Part VI of the General Code (in appendix I of the Consumer Code Regulations) sets out the responsibilities of a licensee in the protection of individual consumer information. These responsibilities stipulate that a licensee may collect and maintain information on individual consumers reasonably required for its business purposes and that the collection and maintenance of such information on individual consumers shall comply with the following principles:
- fairly and lawfully collected and processed;
- processed for limited and identified purposes;
- relevant and not excessive;
- accurate;
- not kept longer than necessary;
- processed in accordance with the consumer’s other rights;
- protected against improper or accidental disclosure; and
- not transferred to any party except as permitted by any terms and conditions agreed with the consumer, as permitted by any permission or approval of the NCC, or as otherwise permitted or required by other applicable laws or regulations.
Licensees are required by the Consumer Code Regulations to adopt similar provisions guaranteeing the same level of protection (or higher) in the production of their own individual consumer codes.
In addition, licensees are required by these responsibilities to meet generally accepted fair information principles including:
- providing notice as to what individual consumer information they collect, and its use or disclosure;
- the choices consumers have with regard to the collection, use and disclosure of that information;
- the access consumers have to that information, including to ensure its accuracy;
- the security measures taken to protect the information; and
- the enforcement and redress mechanisms that are in place to remedy any failure to observe these measures.
In addition, the National Information Technology Development Agency Data Protection Regulations, issued by NITDA, is a set of regulations that specifies the condition in which personal data may be processed. Among other things, the NITDA Data Protection Regulations sets out the lawful basis for processing personal data, the rights of the data subject, obligations of data controllers and conditions under which the cross-border transfer of personal data is permissible. NITDA Data Protection Regulations apply to all sectors of Nigeria’s economy including the communications sector.
CybersecurityIs there specific legislation or regulation in place concerning cybersecurity or network security in your jurisdiction?
Yes. The Cybercrime Act 2015 (the Cybercrime Act) provides a unified and comprehensive legal framework for the prohibition, prevention, detection, prosecution and punishment of cybercrimes in Nigeria. The Cybercrime Act also ensures the protection of critical national information infrastructure and promotes cybersecurity and the protection of computer systems and networks, electronic communications, data and computer programs, intellectual property and privacy rights.
In addition, the National Information Systems and Network Security Standards and Guidelines 2013 and the Nigerian Cybersecurity Framework 2019 issued by NITDA prescribe mandatory minimum standards on seven primary areas of network security and cyber forensics, which are:
- categorisation of information;
- minimum security requirements;
- intrusion detection and protection;
- protection of object identifiable information;
- securing public web server;
- system firewall; and
- cyber forensic.
The Framework goes on to further recommend best practice guidelines for public- and private-sector organisations for instituting measures for enshrining cybersecurity culture and enthronement of cyber-resiliency in Nigeria.
Big dataIs there specific legislation or regulation in place, and have there been any enforcement initiatives in your jurisdiction, addressing the legal challenges raised by big data?
There is no specific legislation on big data. However, the Cybercrime Act has as one of its objectives the promotion of cybersecurity and the protection of computer systems and networks, electronic communications, data and computer programs, intellectual property and privacy rights. Although, the Cybercrime Act does not use the term ‘big data’ but instead uses the term ‘data’, which it defines as ‘representations of information or of concepts that are being prepared or have been prepared in a form suitable for use in a computer’. The Cybercrime Act imposes a number of obligations relating to the retention and confidentiality of data on any public or private entity that provides to users of its services the ability to communicate by means of a computer system, electronic communication devices, mobile networks and entities that process or store computer data on behalf of such communication service or users of such service. We are unaware of any enforcement initiatives in this regard that have occurred since the enactment of the Cybercrime Act.
Data localisationAre there any laws or regulations that require data to be stored locally in the jurisdiction?
Yes. The Guidelines on Nigerian Content in ICT issued by NITDA require information and communications technology companies and data and information management firms in Nigeria to host, respectively, all subscriber and consumer data and government data locally within the country and further provide that they shall not for any reason host any government data outside the country without express approval from NITDA and the Secretary to the government of the federation.
Key trends and expected changesSummarise the key emerging trends and hot topics in communications regulation in your jurisdiction.
In the communications sector, the attention of the Federal Government of Nigeria appears to be focused on how to develop and deploy 5G technologies for development and as a strategy for delivering communications services to unserved and underserved areas of Nigeria. As a result, the NCC, on 29 November 2021, auctioned two lots of 100MHz each in the 3.5GHz band ranging from 3500–3600MHz and 3700–3800MHz to facilitate the deployment of 5G in Nigeria. This was followed by the issuance of the National Policy for 5G networks for Nigeria’s Digital Economy by the Minister of Communications and Digital Economy in January 2022. The policy is intended to address the provision of the required spectrum and enabling environment to ensure the full deployment of 5G in Nigeria.
Some of the objectives to be achieved by the policy include:
- the effective deployment of 5G to cover major urban areas by 2025;
- the security of the 5G ecosystem and the protection of data;
- the application of international best practices and globally accepted standards and specifications to the 5G ecosystem in Nigeria; and
- adequate infrastructure needed for the successful deployment of 5G networks such as data centres, power, etc.
The implementation of the policy has been assigned to the NCC, which implementation shall be through the development of strategies, standards, guidelines and frameworks aimed at accelerating 5G deployment in Nigeria. This implementation will commence immediately in Abuja, Anambra, Gombe, Kaduna, Lagos and Rivers states before extending to other urban areas by 2025. The policy prescribes two network deployment options for 5G deployment in Nigeria. These options are non-standalone (NSA) and stand-alone (SA). It is expected that network operators will implement SA after moving through an NSA. According to the 5G deployment timeline provided in the policy, there will be a spectrum allocation and auction in 2022. While in 2023, and beyond, phases one and two deployments shall commence respectively with NSA and SA. Regarding spectrum use and assignment, the policy states that the NCC is directed to enforce the use-it-or-lose-it policy to ensure the maximum utilisation of assigned spectrum. Last, in implementing the policy, the NCC will in collaboration with Nigerian Communications Satellite Limited explore how satellite communications technologies may be leveraged to accelerate the deployment of 5G across Nigeria.