Social Media has Become Nigeria’s Shadow Opposition. The Government Is Not Amused. 

Last week, the Socio-Economic Rights and Accountability Project (SERAP) urged Senate President Godswill Akpabio and House Speaker Tajudeen Abbas to reject the Nigeria Data Protection (Amendment) Bill, 2026, describing it as a backdoor attempt to regulate social media and expand governmental control over online expression.

The dispute appears to be another debate about digital regulation, yet the significance of the Bill extends far beyond questions of compliance or data governance. It speaks to a broader shift that has quietly transformed Nigerian politics over the last few years: as traditional opposition parties have weakened, the internet has increasingly assumed one of their most important functions.

Nigeria’s opposition landscape has hardly looked more fragile. The People’s Democratic Party (PDP), historically the APC’s most formidable challenger, is mired in defections and internal disputes, while no other political party has demonstrated either the organisation or public support necessary to fill the vacuum. At the same time, the legislature has shown little appetite for meaningful oversight of the executive, and the judiciary is routinely accused of retreating from politically contentious battles. The result is a political environment in which the Tinubu administration faces remarkably little institutional resistance.

Yet the disappearance of effective opposition politics has not produced an absence of scrutiny. Instead, that scrutiny has migrated online.

Increasingly, the internet—not opposition parties—shapes the national conversation. It compels responses from government officials, pressures celebrities to take public positions, forces corporations to address public concerns, and keeps stories alive long after those in power would prefer them forgotten. In many respects, ordinary Nigerians have become more effective at scrutinising government actions through digital platforms than many of the institutions formally established to perform that role.

Earlier this year, sustained online pressure helped push celebrities to amplify the #BringBackOurStudents campaign. The legal and political battle surrounding Senator Natasha Akpoti-Uduaghan remained in the public consciousness largely because Nigerians refused to let the conversation disappear from their timelines. Even discourse and protests around the amendments to the Electoral Act were shaped as much by digital activism as by formal opposition politics.

That reality makes the internet uniquely inconvenient for any government. It also helps explain why the Nigeria Data Protection (Amendment) Bill deserves far more attention than its technical language might initially suggest.

Sponsored by Senator Ned Nwoko (APC, Delta North), the Bill would require social media platforms, data controllers and data processors operating in Nigeria to establish physical offices within the country. It also empowers the Nigeria Data Protection Commission (NDPC) to suspend or prohibit the operations of companies that fail to comply within 30 days.

While these provisions may appear administrative on paper, their practical implications are far more significant. Requiring technology companies to maintain local offices increases the government’s leverage over digital platforms, making political pressure easier to exert, censorship requests easier to enforce, and local employees more vulnerable to retaliation. The consequences of such a policy would not be confined to multinational technology companies. If platforms conclude that the regulatory burden outweighs the benefits of remaining in Nigeria, ordinary Nigerians would once again bear the cost.

The experience of the 2021 Twitter ban is a useful reminder. Hundreds of businesses that relied on the platform to reach customers saw their operations disrupted overnight, illustrating a reality that governments often overlook when pursuing internet restrictions: the people who suffer most are rarely the policymakers imposing the restrictions, but the citizens whose livelihoods increasingly depend on digital spaces.

There is also a deeper irony here. The internet has fundamentally redistributed power over public narratives. Politicians, celebrities and business leaders who once relied on traditional media gatekeepers to shape public perception must now contend with millions of Nigerians capable of documenting, scrutinising and amplifying information in real time. Senator Ned Nwoko himself is one of several prominent public figures who have experienced just how difficult it can be to control a story once it escapes into the online public sphere. Whether in politics, business or private life, reputation is no longer managed exclusively through newspaper interviews and carefully worded press statements.

It is against that backdrop that his sponsorship of legislation designed to expand governmental leverage over digital platforms inevitably attracts scrutiny.

The Nigeria Data Protection (Amendment) Bill does not exist in isolation. Rather, it fits into a longer history of attempts by Nigerian lawmakers to regulate the digital space, often under the justification of protecting citizens while simultaneously expanding the state’s ability to determine what can and cannot be said online.

As far back as 2019, lawmakers introduced the Protection from Internet Falsehood and Manipulation Bill, popularly known as the Anti-Social Media Bill. The proposed legislation sought to criminalise the spread of false or malicious information online, but it quickly attracted criticism from journalists, civil society organisations and free speech advocates who argued that its broad provisions could easily be used to suppress legitimate criticism and restrict press freedom.

Although the Bill progressed through the Senate, widespread public opposition prevented it from becoming law. The resistance mattered because it demonstrated something that has become increasingly clear in Nigeria’s digital age: online spaces are not merely platforms for entertainment or casual conversation. They have become important arenas where citizens organise, mobilise and challenge decisions made by those in power.

The Cybercrimes Act presents another example of this tension. While the law was created to combat online fraud, cyberattacks and other forms of digital crime, it has repeatedly faced criticism for its use against journalists, activists, and government critics. Provisions intended to address genuine online threats have, in practice, also become tools that can be used to intimidate those challenging authority.

That brings up an important question: if protecting Nigerians’ personal data is truly the primary concern behind this legislation, why does the solution appear to be another law rather than better enforcement of the laws that already exist?

Nigeria is not operating in a legal vacuum when it comes to data protection. The Nigeria Data Protection Act, 2023, already provides a framework for safeguarding personal information and regulating how organisations collect, process, and store citizens’ data. Beyond that, the Cybercrimes Act requires organisations to report cyberattacks and security breaches to the National Computer Emergency Response Team (ngCERT), while the Central Bank of Nigeria’s cybersecurity framework establishes minimum security requirements for financial institutions.

The challenge, therefore, is not that Nigeria lacks regulations. The challenge is that existing regulations are often poorly enforced.

Recent cybersecurity breaches demonstrate this gap. In April 2026, the Corporate Affairs Commission disclosed that its systems had suffered an attack involving unauthorised access to its information systems. This followed other reported breaches involving major Nigerian institutions, including Sterling Bank and Remita, highlighting the vulnerabilities that continue to exist despite the country’s growing collection of cybersecurity regulations.

Nigeria’s recurring instinct to respond to every failure with another law often obscures the harder work of strengthening the institutions responsible for implementing those laws. This tendency extends beyond digital regulation. Increasingly, the National Assembly appears more interested in producing new legislation than in confronting the institutional failures that allow many of Nigeria’s problems to persist.

At the height of Nigeria’s worsening insecurity crisis last year, lawmakers proposed classifying kidnapping as an act of terrorism and prescribing the death penalty for convicted offenders. The Bill, sponsored by Senate Leader Opeyemi Bamidele, progressed quickly through the Senate, presenting itself as a decisive response to one of the country’s most urgent security challenges. Yet the proposal ignored a fundamental reality: kidnapping was already an offence under Nigerian law, and ransom payments had already been prohibited in 2022. 

The continued prevalence of kidnapping is not the result of inadequate legislation. It is the consequence of deeper institutional failures, including weak intelligence gathering, limited policing capacity, poor prosecution rates, and the inability of security institutions to prevent attacks before they occur. Passing another law does little to address these underlying problems.

The same pattern appears in the Nigeria Data Protection (Amendment) Bill. Rather than confronting why existing protections have failed or why institutions remain vulnerable, lawmakers have proposed legislation that expands government authority over digital platforms while doing little to strengthen the systems responsible for protecting Nigerians online. 

This is ultimately why the Data Protection (Amendment) Bill deserves scrutiny beyond its technical language. Viewed narrowly, it can be presented as a proposal about corporate compliance, data protection and digital regulation. However, when considered alongside the Twitter ban, previous attempts to regulate social media, the controversial application of the Cybercrimes Act and the administration’s frequent warnings about “misinformation,” “fake news,” and “social media influencers,” alarm bells start to ring..

The Nigerian government’s discomfort with the internet is rooted in the fact that digital platforms have weakened traditional methods of controlling public narratives. For decades, governments relied heavily on state broadcasters, traditional media gatekeepers and political structures that determined which issues received national attention. Social media disrupted that arrangement by allowing citizens to bypass those traditional channels entirely.

Today, a single post can expose misconduct, document abuse, or force a government institution to respond before an official statement is prepared. Information moves faster than political messaging, and public figures can no longer completely control how their actions are interpreted or discussed. The internet has fundamentally altered the relationship between citizens and those in power by making scrutiny more immediate and public. That redistribution of power is one of the internet’s greatest democratic contributions. It is also precisely what makes it uncomfortable for governments that prefer greater control over public narratives.

Across Africa, governments have repeatedly attempted to manage this challenge. Uganda has restricted internet access around elections, while Nigeria’s decision to suspend Twitter in 2021 demonstrated the lengths governments can go when digital platforms become spaces for criticism, mobilisation, and public accountability. The language used to justify these restrictions often changes. Sometimes it is misinformation, sometimes it is national security, sometimes it is data protection.

But the underlying concern remains remarkably consistent: an online public sphere that is increasingly difficult for governments to control.

For all its flaws, social media has become one of the few spaces where ordinary Nigerians can meaningfully challenge power. When opposition parties struggle to hold the government accountable, when institutions designed to provide checks and balances fall short, and when traditional channels of accountability appear ineffective, Nigerians increasingly turn to digital platforms to organise, document, question, and resist.

That is not necessarily how a healthy democracy should function. The internet should strengthen democratic institutions, not replace them. Yet until Nigeria’s formal opposition becomes more effective and its institutions become more willing to perform their constitutional roles, social media will continue to fill the vacuum left behind.

This is why the Nigeria Data Protection (Amendment) Bill is about much more than corporate compliance or digital regulation. It is a debate about who controls public conversation in Nigeria and how much space citizens have to challenge those in power.