By Kehinde Ogundare, country head, Zoho Nigeria
Artificial intelligence is everywhere–in polished social media posts, in the recommendations that guide our viewing habits, and in the bots that handle customer queries before a human agent steps in. On LinkedIn, AI-assisted writing has become standard practice. A year ago, more than half of English long-form posts that went viral were estimated to have been written by or assisted by AI. If that’s the norm on the world’s biggest business network, it’s no surprise that AI is driving conversations in Nigerian boardrooms as companies move from experimentation to embedding AI into their daily operations.
Part of the package
The Nigeria Data Protection Act (NDPA), modelled on the European Union’s General Data Protection Regulation, together with the Nigeria Data Protection Commission, requires companies to build privacy into their systems from the outset rather than adding it later. This clear regulatory framework has evolved alongside a rapid rise in AI adoption.
New research from Zoho on responsible AI adoption highlights the impact of the regulations. As per the report, 93% of Nigerian companies have already started using AI in their daily operations; 84% have tightened their privacy controls after adoption, and 94% now have a dedicated privacy officer or team, which is well above global averages.
The survey, conducted by Arion Research LLC among 386 senior executives, shows just how deeply embedded AI has become in Nigeria. One in four companies already uses it across several departments, and nearly a third report advanced integration. Financial services firms are pioneers in this sector, using AI to automate client interactions, streamline operations and sharpen their marketing, while staying compliant with data protection rules.
The NDPA has helped make privacy part of business planning. Four in ten companies now spend more than 30% of their IT budgets on privacy. Regular audits, privacy impact assessments and explainability checks are becoming standard practice.
Skills, compliance and capacity
Rapid adoption brings challenges. More than a third of businesses say that their biggest obstacle is a lack of technical skills, and another 35% cite privacy and security risks. Instead of outsourcing, most are building capacity in-house: nearly 70% of companies are training staff in data analysis, more than half are improving general AI literacy, and 40% are investing in prompt engineering for generative tools.
The understanding of the NDPA regulation, which came into force in 2023, has also improved. 65% of organisations see compliance as essential. Many voluntarily apply data-minimisation and transparency standards even when not required to do so, aligning more closely with international norms and easing collaboration with global partners.
Privacy is increasingly influencing business decisions — from investment priorities to system design. Companies are asking tougher questions: is specific data essential? How can exposure be limited? How can fairness and transparency be proven?
Trusted systems
As privacy becomes part of how technology is built, companies are being more cautious about the tools they use because they now want systems that protect customer data, with clear boundaries between data and model training, straightforward controls, and reliable records for compliance teams.
Demand for business software that balances productivity with privacy is also growing. Zoho, among others, has seen strong customer growth as more organisations are looking for platforms that support responsible data handling.
The study identifies three main reasons behind AI adoption: to make work more efficient by automating routine tasks, to support better decision-making by identifying patterns sooner, and to improve customer engagement through faster, more relevant interactions. But none of this can succeed without trust. Nigeria’s experience shows that privacy and innovation can reinforce each other when they’re built together.
There’s still work to do because some industries are moving faster than others, and smaller businesses often face the biggest hurdles in time, cost and skills. Enforcement is also patchy; while the law is clear, application across sectors and geographies is a work in progress.
The next steps are more practical, requiring investment in skills – from data analysis and AI literacy to sector-specific training – and for governance to be put in place, with clear responsibilities, written policies, and a plan for managing errors or breaches. Privacy impact assessments should become part of every new system rollout, enabled by technology.
As AI becomes fundamental to doing business, Nigerian companies that build it carefully and responsibly will be better able to compete at home and abroad.
