Legal and technology experts have called for stronger privacy laws in Africa, better enforcement, and continuous review of existing regulations to protect vulnerable persons in the digital space.
They made the call in Lagos at the seventh edition of the Privacy Symposium Africa (PSA 2025), with the theme: “Bridging policy, technology and societal dynamics.”
Organised by Unwanted Witness, the three-day symposium examined Africa’s urgent challenges around privacy, digital governance, data ethics and emerging technologies, with the goal of shaping a digital future anchored on trust, equity and human rights.
The event brought together leading data protection specialists, regulators, policy-makers, civil society actors, legal professionals and industry experts.
Unwanted Witness co-hosted the programme with the Nigeria Data Protection Commission (NDPC), Centre for Information Technology and Development (CITAD), and the Data Protection Lawyers Association of Nigeria (DPLAN).
Masterclasses and panel discussions featured the state of surveillance in Africa, biometric technologies, digital ID, EdTech and children’s privacy, data breach preparedness, media and misinformation.
The keynote speaker, Dr Adekemi Omotubora of the University of Lagos (UNILAG), decried the increasing misuse of children’s images and personal data.
She noted that although at least 44 African countries now have data protection laws, very few offer dedicated safeguards for children.
She stressed that data protection regulations must address the risks children and other vulnerable persons face.
“Up to 16 countries have launched AI strategies, but they must protect children. We must look beyond the laws.
”Are the provisions robust enough to protect children in the AI era? That should be the key consideration,” she said.
The NDPC restated its commitment to strengthening data governance and promoting ethical digital practices.
National Commissioner/CEO, Dr Vincent Olatunji, represented by the Commission’s Head of Innovation, Adaobi Nwankwo, said Nigeria is advancing policy reforms that place citizens’ rights and responsible data use at the heart of digital transformation.
He noted that the Nigeria Data Protection Act (NDPA) provides a solid framework for safeguarding personal data while supporting innovation.
According to him, Nigeria has made progress in licensing data protection officers, registering data controllers, investigating breaches and expanding multi-sectoral collaboration.
With the rapid growth of Artificial Intelligence, the Internet of Things and biometric systems, Olatunji warned that Africa must adopt harmonised, future-focused data protection mechanisms to address emerging risks.
“Ethical and transparent data use must become a continental priority.
“Together, we can build an Africa where technology serves humanity, strengthens communities and respects privacy,” he said.
Vice-Chair of DPLAN, Dr Faith Okpara, stressed that privacy protection should not be an afterthought.
“It should be part of system design,” she said, urging regular data protection impact assessments and tools with strong encryption.
Okpara also made a strong case for data minimisation.
“There should be clear retention periods. Once the purpose is done, do away with the data,” she said, calling for greater public literacy on privacy rights.
A legal practitioner Abdulmalik Muhaimin argued that the provisions for adequate data protection already exist in several African countries but that enforcement remains weak.
He identified differences in regional laws as a challenge and called for greater alignment.
“One of the things we can consider is a uniform data privacy law, which will help with compliance obligations so that organisations don’t have to start checking what the specific differences are,” he said.
Privacy must drive Africa’s digital revolution, says Mukasa
Executive Director of Unwanted Witness Uganda, Ms Dorothy Mukasa, set the tone for PSA 2025 with a strong call for Africa to safeguard digital transformation with accountability, citizen rights and ethical technology standards.
She urged governments, regulators, civil society and private sector actors to ensure the continent’s technological growth does not become “a new frontier of inequality and exploitation.”
She said privacy and trust must be treated as core pillars of Africa’s digital future rather than afterthoughts.
“At a time when data is power, we must ask who holds that power and who is left vulnerable,” she said.
She argued that digital systems must serve society rather than commercial interests and urged stronger accountability for how governments and companies collect and use personal data.
Mukasa announced a major milestone in Unwanted Witness’ flagship Privacy Scorecard Report, which is now in its fifth year.
Initially focused on Uganda, it now evaluates privacy performance in nine countries across East, Southern and West Africa.
She described the Scorecard as a continental benchmark for ethical digital governance.
“We wanted institutions to understand that how they collect, store and use people’s data is not just a compliance issue, it is a matter of trust and accountability,” she said.
Mukasa noted the growth of data protection authorities, stronger civil society engagement and increasing recognition among businesses that privacy can be a competitive advantage.
She also highlighted the organisation’s work across elections, free expression and digital rights, including the annual Moot Court Competition nurturing the next generation of privacy advocates.
She urged delegates to “challenge boldly and collaborate meaningfully,” stressing that the movement for privacy must be collective and pan-African.
“Let this not just be another conference, but a spark for lasting change across our institutions, our laws and our cultures,” she said.
