Lack of laws on Nigerian data sovereignty paves way for illicit access
The Group Managing Director, Comercio Limited, Mrs. Aderonke Adeyegbe has called for legislative action on the National Assembly to enact a law governing data protection and sovereignty.
This is as the Managing Partner, Technology Advisors LLP, Basil Udotai, noted that gaps in Nigeria cybersecurity laws have made it difficult to properly addressed important cybercrime issues.
He revealed that “It is not surprising that the country tends to get more information on hacking incidents abroad than in Nigeria, as there is no compulsion to disclose breaches in the entire ecosystem.
“My question is, who has ever been prosecuted or convicted for hacking in Nigeria? Our analysis shows that the reported breaches in Nigeria are all low end cases. This makes one wonder, are our networks here in Nigeria so impenetrable?
“The Nigeria electronic Fraud Forum (NeRF) report of 2017, stated that the total fraud volume was just placed at 19,431 that year. Who conducted these investigations, and were the defaulters arrested?
“But we tend to hear greater number of reported cases abroad. How come we do not have competent authority handling cybercrime and cybersecurity in Nigeria? It is disheartening that we keep managing cybercrime as if it is a profit and loss business. These are prospects and areas the Cybersecurity Act does not addressed,” Udotai argued.
Speaking at a recent International Cyber Security and Cloud Conference, in Lagos, Mrs. Adeyegbe said while we are in need of policy on safe localisation of data, there is also need to understand that cybersecurity have made many businesses reluctant to adopt certain ideas.
She said privacy and security are critical to data sovereignty and cloud service adoption in Nigeria to tame the activities of shadowy hacker, who wreaks havoc on computer networks from a remote location.
She pointed accusing fingers on some state actors, who are deeply involved, saying data sovereignty has become a big issue in recent years, and questions have been raised about the geo-political jurisdiction over data generated in one country and stored in facilities located in another.
“In some cases, huge amounts of data have been obtained from citizens of certain countries by governments of other countries, without their permission.
“This is one more headache for the contemporary Nigerian business. Many countries have enacted laws aimed at preventing the transfer of data from their citizens to agents from other countries without their permission. Nigeria has provisions in some of its laws that touch on this issue, but it does not have a law that deals specifically with data sovereignty.
“Unfortunately, the commercial and public sectors struggle to deal with these challenges. They still lag behind much of the world in terms of the quality and coverage of IT infrastructure. IT services providers are helping to bring these sectors closer to global technology norms. But their efforts are hampered by deficits in human capital and physical infrastructure,” Adeyegbe stated.
Otherwise, she averred that there is a global shortage of cybersecurity experts, noting that a study by the Centre for Strategic and International Studies, claimed that by 2022, there will be upwards of 1.8 million unfilled positions in cybersecurity across the world.
According to her, “Privacy and security concerns are the main barriers to the adoption of public cloud in Nigeria, while its vulnerability to attacks has increased the interest of cybercriminals.”
Adeyegbe further recalled that in 2016, Cybersecurity Ventures, an organisation researching the global cyber economy, projected that cybercrime could cost the world $6 trillion yearly by 2021.
“This figure is double the losses attributed to cybercrime in 2015. These losses are expected to come from the damage and destruction of data, stolen money, theft of intellectual property, personal information, and financial data, and attacks on business processes, just to mention a few,” she stated.