FG moves to review cybercrime law over AI threats

The Nigerian government aims to review the country's cybercrime legislation to tackle emerging threats posed by artificial intelligence, according to the Attorney-General of the Federation and Minister of Justice, Lateef Fagbemi. This review comes as part of a broader effort to strengthen the nation's legal framework in light of technological advancements.

Fagbemi revealed this during the second International Cybersecurity Conference in Abuja, which was organized by the National Information Technology Development Agency (NITDA) and the Nigerian Communications Commission (NCC). The conference focused on the theme "Cyber Resilience in the Age of AI: Defending Minds, Networks and Nations."

The proposed bill seeks to update the legal framework to reflect the rapid pace of technological developments, enhance the preservation and exchange of electronic evidence, and strengthen collaboration among law enforcement agencies. Fagbemi emphasized that the initiative is built upon Nigeria's accession to the Budapest Convention on Cybercrime and the country's engagement with the United Nations Convention against Cybercrime.

Cybercrime in Nigeria has evolved beyond traditional internet fraud to encompass cryptocurrency-related offenses, sextortion, child exploitation, and AI-assisted deception. Fagbemi stressed that the aim is to create laws that effectively address these emerging technologies while preserving human rights and upholding the rule of law. He cautioned against compromising fundamental freedoms in the name of security.

NITDA Director-General, Kashifu Inuwa Abdullahi, confirmed that his agency is collaborating with the Office of the National Security Adviser and the National Assembly to review the Cybercrimes Act and incorporate more legislative power. Abdullahi highlighted the escalating threat of AI-generated voices, videos, and images used to exploit human vulnerabilities, a shift from traditional system hacking.

He warned that criminals are increasingly focusing on hacking individuals to achieve their objectives rather than targeting computer systems directly.

Abdullahi introduced the concept of digital sovereignty, emphasizing NITDA's national sovereign cloud regulatory instrument that covers data, infrastructure, cloud computing, and artificial intelligence. The NCC's Executive Vice-Chairman, Aminu Maida, stressed that AI-powered cyberattacks could disrupt telecommunications, financial services, and government operations.

He cited examples of reported cyberattacks on supermarket refrigeration systems in France and spyware targeting journalists and media personnel in the Middle East. Maida warned that attacks on telecommunications infrastructure could significantly impact national security and economic activities. Maida called for the adoption of zero-trust security systems and continuous testing of AI models for vulnerabilities, urging telecommunications operators to implement these measures to enhance security.

Meanwhile, the Senate Committee on ICT and Cybersecurity Chairman, Shuaib Salisu, proposed the establishment of a national cybersecurity resilience index to assess organizations' preparedness against cyber threats. Salisu also advocated for a joint retreat involving technology regulators, security agencies, and lawmakers to coordinate cybersecurity policies.

Salisu called for the adaptation of existing cybersecurity legislation and stronger international cooperation to address the evolving challenges posed by cyber threats. Chairman of the House of Representatives Committee on ICT and Cybersecurity, Stanley Adedeji Olajide, emphasized the inadequacy of current cybersecurity legislation in the face of rapid technological developments.

He urged for adaptable laws and strengthened international cooperation to safeguard essential services, including food supply systems.