The data dignity deficit: Nigerians and the fight for digital citizenship

Nigeria’s digital economy is expanding at remarkable pace, but beneath the celebratory narrative of innovation lies a more consequential question: who owns the Nigerian citizen in the digital age? As the country digitises finance, commerce, identity systems, governance, and everyday communication, personal data has become one of the most valuable resources in the national economy. Yet the social and institutional structures required to protect that data remain underdeveloped. The result is a widening deficit that may be described as a crisis of data dignity – the gap between the enormous value extracted from citizens’ digital lives and the minimal control citizens possess over that information.

The scale of Nigeria’s digital transformation is difficult to overstate. Within the past decade, the information and communications technology sector has become one of the most dynamic drivers of economic growth, contributing roughly 11–12 percent of GDP by some recent national accounts. Internet penetration now exceeds 150 million active connections, while smartphone adoption continues to surge, turning mobile devices into the primary media through which Nigerians access financial services, education, healthcare, and government systems. Digital payment platforms process trillions of naira annually, while fintech companies, logistics platforms, ride-hailing applications, e-commerce marketplaces, and social media ecosystems collectively generate unprecedented volumes of behavioural data.

In purely economic terms, Nigeria is experiencing what might be called data industrialisation. Just as the industrial revolution transformed coal and steel into the primary resources of the nineteenth century, the digital economy transforms information into the primary raw material of the twenty-first. Every mobile transaction, biometric verification, online purchase, GPS movement, and social interaction leaves behind a trail of data points that can be aggregated, analysed, monetised, and sometimes weaponised.

But the extraordinary expansion of Nigeria’s data economy has not been matched by a corresponding expansion in public awareness of data rights. Millions of Nigerians participate in digital ecosystems without fully understanding how their personal information is collected, stored, shared, and analysed. Privacy policies remain opaque, consent mechanisms are often perfunctory, and digital literacy programmes rarely include comprehensive education on data governance. The result is a peculiar paradox: one of the world’s most rapidly digitising societies is simultaneously one of the least prepared to defend its citizens’ digital autonomy.

The consequences of this imbalance are already visible. Nigeria has become one of Africa’s most targeted environments for cybercrime and data exploitation. Recent cybersecurity reports indicate over 119,000 data breaches recorded in the first quarter of 2025, exposing millions of credentials tied to Nigerian accounts. Analysts estimate that roughly one in ten Nigerians may have experienced some form of data compromise, ranging from leaked passwords and identity theft to financial fraud. These breaches occur across a spectrum of institutions, revealing systemic weaknesses in both private-sector security architecture and public-sector oversight.

But the deeper issue extends beyond individual breaches. The emerging problem is structural: the Nigerian citizen is becoming increasingly legible to institutions while remaining largely blind to those institutions that observe them.

Governments, corporations, and algorithmic systems can map behavioural patterns, consumption habits, location histories, and social networks with growing precision.

Meanwhile, the individuals whose lives generate these datasets often lack knowledge of how their information circulates within digital ecosystems.

This asymmetry represents the core of the data dignity deficit. In classical political theory, citizenship implies reciprocal recognition between the individual and the state: citizens obey laws but also possess rights that counterbalance the power of institutions. In the digital sphere, however, this balance has yet to fully emerge. Individuals produce data continuously, but their rights over that data remain ambiguous.

The realities of digital citizenship represent a new frontier of civil rights. Here, the most consequential forms of power increasingly operate through information systems rather than physical coercion. Algorithms determine credit eligibility, biometric systems regulate mobility, predictive analytics guide public policy, and artificial intelligence increasingly mediates access to employment, insurance, and financial services. In such a society, the integrity of personal data becomes inseparable from the integrity of life itself. The Nigeria Data Protection Act of 2023 marked a significant milestone by establishing a national regulatory framework for data governance and creating the Nigeria Data Protection Commission as an independent authority responsible for enforcement. The law formally recognises data privacy as a fundamental right and imposes obligations on organisations that collect and process personal information.

But legislation alone cannot resolve the Nigerian data dignity deficit. The deeper challenge lies in transforming privacy from a technical regulatory issue into a civic norm. A right that exists only on paper remains inert. Data protection must become part of the everyday language of citizenship – understood by ordinary citizens navigating digital platforms.

These tensions are especially pronounced in Nigeria because of the country’s unique digital trajectory. Unlike many Western societies where digitisation occurred gradually across decades, Nigeria has undergone a compressed technological leap. Entire sectors of the economy transitioned from analogue systems directly into sophisticated mobile platforms within a single generation. Millions of citizens who had never previously held bank accounts suddenly entered digital financial ecosystems through mobile money services and fintech applications. This leapfrogging has produced extraordinary innovation but also amplified vulnerabilities, with digital adoption outpacing digital literacy.

This imbalance encourages exploitation through cybercrime, data brokerage, targeted disinformation, or algorithmic discrimination.

The geopolitical dimension of data governance further complicates Nigeria’s situation. Much of the infrastructure through which Nigerian data flows – cloud servers, social media platforms, payment networks, artificial intelligence systems – is controlled by multinational corporations headquartered outside the country. Nigerian citizens may generate the data, but the economic value derived from that data often accumulates elsewhere. This reality raises uncomfortable questions about digital sovereignty. If data is the strategic resource of the twenty-first century, then the governance of data becomes a central question of national autonomy. Countries that fail to protect their citizens’ data risk becoming passive suppliers of raw information to global technology ecosystems dominated by foreign firms.

Nigeria’s policymakers therefore face a dual challenge. On one hand, they must cultivate an environment that encourages technological innovation and digital entrepreneurship. On the other, they must ensure that the benefits of the data economy are distributed in ways that respect individual rights and national interests.

Striking this balance will require regulatory sophistication, institutional capacity, and sustained public engagement.

The idea of data dignity provides a useful philosophical framework for navigating this challenge. The concept emphasises that personal data should not be treated merely as an economic commodity extracted from individuals without compensation or control. Instead, data should be understood as an extension of personal identity – something that carries moral and civic significance.

In practical terms, this implies several transformations. Citizens must have meaningful control over how their data is collected and used.

Organisations must be transparent about the algorithms that shape digital experiences.

Regulatory bodies must possess the technical expertise necessary to audit complex data. And educational institutions must incorporate digital rights into broader programmes of civic literacy.

Perhaps most importantly, Nigerians must begin to see digital citizenship as inseparable from democratic citizenship. The struggle for civil rights has always evolved alongside technological change. The printing press transformed debates about free expression.

Industrialisation reshaped labour rights.

Broadcast media altered political communication. Today, digital networks and artificial intelligence are redefining the terrain upon which rights are contested.

In this emerging landscape, the protection of personal data becomes not simply a matter of cybersecurity but a question of human autonomy in an algorithmic society. A citizen whose digital identity can be manipulated, stolen, or exploited without recourse is a citizen whose freedom is incomplete. Nigeria’s digital future will therefore depend not only on broadband infrastructure, fintech innovation, or startup investment. It will depend equally on whether the country can cultivate a culture in which individuals recognise the value of their digital identities and insist upon the rights that accompany them.

In the past, citizenship was about the relationship between individuals and the territorial state. Today it increasingly concerns the relationship between individuals and vast networks of data-processing institutions that transcend borders and operate at planetary scale. Nigeria stands at the threshold of this transformation. With one of the largest digital populations in the world and one of the most vibrant technology sectors in Africa, the country could shape a model of digital governance that balances innovation with dignity.

But achieving that balance will require recognising a simple truth of the twenty-first century; data protection is often as important as life itself.

Dr Hani Okoroafor is a global informatics expert advising corporate boards across Europe, Africa, North America and the Middle East. He serves on the Editorial Advisory Board of BusinessDay. Reactions welcome at [email protected]