By our reporter
Nigeria has officially enacted the Cybercrimes (Prohibition, Prevention, etc.) (Amendment) Act, 2024, making its provisions legally binding and enforceable nationwide. The new law, passed by the National Assembly and signed by President Bola Ahmed Tinubu, aims to strengthen cybersecurity across all sectors and increase penalties for digital offenses.
Key changes include a mandatory 72-hour deadline for organizations to report any cyberattacks or security breaches to relevant authorities. Failure to comply could result in internet service suspension and a ₦2 million fine.
To support enforcement, the law imposes a 0.5% cybersecurity levy on electronic transactions made through banks, telecoms, insurance companies, and other institutions. Non-compliance could lead to fines of at least 2% of an organization’s annual revenue and possible loss of license.
The Act also extends criminal liability for cyber offenses like identity theft and system tampering beyond financial institutions to include all public and private sector employees. It clarifies requirements around digital signatures and mandates that sensitive documents signed electronically must have Certified True Copies to be valid.
The government is also expanding national cybersecurity infrastructure, including the establishment of sector-based response teams and a national computer forensics lab. These steps are designed to improve Nigeria’s capacity to detect and respond to cyber threats in real time.
Although some online messages have falsely claimed that the Act punishes fake news, private conversations, or group chat admin roles, these are not included in the 2024 amendment. However, group administrators are still advised to monitor shared content, particularly anything involving threats, fraud, or data breaches.
This law represents a major shift in how Nigeria approaches digital safety, and all stakeholders are urged to stay informed and compliant.
