The Legal Framework for Information Security in the Age of Digital Identity in Nigeria

Abstract

Governments worldwide, including Nigeria’s government, process large volumes of information daily, utilizing both paper-based and digital formats. This encompasses various processing methods including collection, recording, storage, organization, retrieval and dissemination of information. In the legal identity management sector, these information processing activities are rapidly increasing due to various new initiatives. The security of such information is critical for safeguarding the well-being and integrity of citizens, residents and the nation as a whole. This paper employs a doctrinal approach to examine the complexities of the legal framework for information security in Nigeria, specifically in today’s age of digital identity. It highlights the unique intricacies, issues and challenges related to information security in Nigeria’s digital identity sector, and broader issues relevant to information security across all federal public sectors. The paper is comparative with recourse being had to South Africa’s approach towards information security in its public service for insights. The findings reveal that, the legal framework for information security in Nigeria remains inadequate as it fails to sufficiently address critical information security measures. There is thus, an urgent need for increased regulation of information management and information security in Nigeria.