NCC Establishes Internet Governance Working Group to Address AI Risks, Online Fraud


By Simpson Global Media News Desk

The Nigerian Communications Commission (NCC) has established an Internet Governance Working Group to strengthen online safety, address emerging artificial intelligence risks and improve coordination among stakeholders responsible for Nigeria’s digital environment.

The initiative was announced following the commission’s inaugural Internet Governance Symposium, held on Thursday, October 15, 2026, in Lagos. The NCC said the group would provide a continuing platform for stakeholders to discuss internet governance challenges, identify priorities and work towards practical measures for a safer and more responsible online environment. Reports published over the weekend highlighted the initiative as part of Nigeria’s response to growing concerns about online fraud, privacy, accountability and the protection of vulnerable internet users. <Cite refs={["turn771540search0","turn771540search5","turn771540view2"]}/>

The commission’s move comes as artificial intelligence and other digital technologies become increasingly integrated into communication, business, education and public services. While these tools can improve access to information and make services more efficient, they also raise questions about how personal information is handled, how harmful online activity is controlled and who should be held responsible when digital systems cause harm.

Speaking at the symposium, Abraham Oshadami, the NCC’s Executive Commissioner for Technical Services, represented the commission’s Executive Vice Chairman and Chief Executive Officer, Aminu Maida. Oshadami said internet governance extends beyond connectivity because decisions about the internet affect opportunity, public trust, security and users’ rights. <Cite refs={["turn771540search0","turn771540view1"]}/>

A continuing platform for digital-sector cooperation

The new working group is intended to maintain engagement beyond the symposium rather than leave discussions confined to a single event. According to the NCC, the platform will help stakeholders exchange views, identify practical priorities and coordinate action on issues affecting Nigeria’s digital ecosystem.

The commission’s announcement emphasised that the challenges emerging from the growth of digital services cannot be handled effectively by one institution acting alone. Regulators, telecommunications operators, internet service providers, technology companies, civil society organisations, researchers and other stakeholders may have different responsibilities, but their decisions can affect the same online users and digital infrastructure.

A coordinated forum could help participants clarify expectations, identify gaps in existing approaches and improve communication between organisations. Its effectiveness, however, will depend on whether discussions produce concrete priorities, clear responsibilities and sustained follow-through.

The NCC has not publicly detailed a complete work programme for the group in the material reviewed for this report. Its announcement establishes the platform’s broad purpose, but does not by itself confirm specific deadlines, enforcement targets or measurable reductions in online fraud. Those outcomes will need to be assessed through subsequent decisions and implementation. <Cite refs={["turn771540search0","turn771540search5"]}/>

Artificial intelligence brings new governance questions

Artificial intelligence is becoming an important part of the digital economy. Businesses can use AI-enabled tools to analyse information, automate repetitive work, support customer service and process large volumes of data. Public and private organisations may also use these technologies to improve the speed of some services and assist decision-making.

However, the same technologies can create new risks when they are used without adequate safeguards. AI-generated material can be misleading, automated systems can reproduce errors or unfair outcomes, and malicious actors can use digital tools to make fraudulent communications appear more convincing.

The NCC identified harmful content, online fraud, privacy concerns, accountability and child protection among the issues requiring attention as AI changes the way people learn, work, communicate and access services. Its position is that these challenges require cooperation across the communications sector and beyond. <Cite refs={["turn771540search0","turn771540view1"]}/>

For Nigerian internet users, the concerns are practical. A person may encounter a fraudulent message through a social platform, receive a suspicious call linked to an online account or share personal information with a digital service without fully understanding how it will be used. AI may make some interactions faster and more personalised, but it can also complicate the task of determining whether information or an online identity is genuine.

These risks do not mean that AI is inherently harmful. They underline the importance of responsible deployment, appropriate oversight and ways for users to seek explanations or redress when something goes wrong.

A working group could help stakeholders exchange information about these risks and identify areas where guidance or coordination is needed. Yet the creation of a forum is only an initial step. Its long-term value will depend on the quality of its recommendations and the willingness of relevant organisations to put agreed measures into practice.

Online fraud remains a key concern

Online fraud can take many forms, including deceptive messages, impersonation, fraudulent websites and attempts to obtain sensitive personal or financial information. The spread of digital services creates legitimate opportunities for consumers and businesses, but it also gives criminals more channels through which to contact potential victims.

Addressing such activity can require cooperation among telecommunications companies, digital platforms, financial institutions, law-enforcement bodies and other organisations. Information relevant to a suspected scam may be held by different service providers, while users may not know which organisation to contact or how to report a problem.

The NCC’s emphasis on collaboration reflects the fact that internet governance involves more than maintaining network connections. It also includes the rules, responsibilities and processes that influence how digital services operate and how users are protected. <Cite refs={["turn771540search0","turn771540view2"]}/>

The working group may provide a venue for stakeholders to discuss how existing responsibilities can be better coordinated. However, the commission’s announcement does not set out a new fraud-reporting procedure or announce a specific enforcement operation. Nigerians should therefore continue to use established reporting channels provided by relevant service providers and authorities rather than assume the new group has replaced them.

Consumers can also reduce exposure to common scams by verifying requests for money or confidential information, checking the authenticity of websites and avoiding unverified links. Organisations offering digital services have their own responsibility to maintain appropriate security controls and communicate clearly with customers.

Effective protection requires more than telling users to be careful. It also depends on whether services are designed securely, suspicious activity can be reported promptly and the responsible institutions can respond when risks are identified.

Data privacy and user confidence

Privacy is another central issue in the NCC’s announcement. Digital services routinely process information about their users, and the amount and variety of data collected can increase as businesses introduce automated tools and AI-powered features.

People may provide personal details when registering for an account, making a payment, applying for a service or communicating with an organisation. They need to understand what information is being collected, why it is needed and how it may be used or shared.

Poor privacy practices can expose individuals to misuse of their information, unwanted contact or other forms of harm. Weak security can also place data at risk. As digital services become more widely used, confidence depends partly on whether people believe that organisations will handle their information responsibly.

The NCC said its approach to internet governance must take account of trust, security and the rights of internet users. It also identified privacy concerns as one of the challenges requiring stronger stakeholder cooperation. <Cite refs={["turn771540search0","turn771540view1"]}/>

The working group’s creation does not establish that a new privacy law has been passed or that the NCC has introduced additional data-protection penalties through this announcement. Rather, the initiative provides a forum in which stakeholders can discuss emerging challenges and consider how the existing regulatory and operational framework should be implemented.

Clear communication will be important. Users should be able to find understandable information about the services they use, while organisations should be able to explain how they protect information and respond to privacy incidents.

NCC highlights Internet Code of Practice 2026

At the symposium, the commission highlighted its Internet Code of Practice 2026 as a framework for promoting a safer and more responsible online environment.

Oshadami said the code’s effectiveness would depend on clear expectations, meaningful stakeholder engagement and consistent implementation. That emphasis points to a challenge common to digital regulation: issuing rules is not the same as ensuring that organisations understand and follow them. <Cite refs={["turn771540search0","turn771540search5"]}/>

For a code of practice to deliver results, organisations need to understand the obligations relevant to their activities. Regulators also need ways to communicate requirements, assess compliance and address shortcomings through appropriate procedures.

The Guardian reported that a survey presented at the symposium found only two of 19 licensees fully ready to implement the Internet Code of Practice 2026. The report said the NCC’s Head of Governance Unit, Ibiso Kingsley-George, identified cybersecurity obligations and AI provisions among the requirements that licensees found difficult to meet. The survey covered 47 respondents from industry, academia and civil society, including mobile network operators, internet service providers and academic institutions. <Cite refs={["turn771540search5"]}/>

The finding raises questions about implementation readiness, but it should be interpreted within the scope of the reported survey. It does not establish that every Nigerian telecommunications provider is unprepared, nor does it measure the compliance status of every digital company operating in the country.

It does suggest that implementation support may be important. Clearer guidance, practical examples, reporting templates and opportunities to ask questions could help organisations understand what is expected of them. The NCC’s new working group may offer a forum for discussing such issues, although the commission has not announced in the materials reviewed a detailed timetable for resolving the reported gaps.

Cyber resilience and protection of digital infrastructure

The NCC also drew attention to the Cyber Resilience Framework for the Nigeria Communication Sector, which is intended to strengthen the security and resilience of infrastructure supporting digital services.

Digital infrastructure includes the systems and networks that allow people and organisations to communicate, exchange information and access online services. When those systems are disrupted or compromised, the consequences can extend beyond individual users to businesses and institutions that depend on reliable digital connections.

Cyber resilience involves preparing for threats, reducing vulnerabilities, responding to incidents and restoring services when disruption occurs. It complements efforts to prevent attacks by recognising that organisations must also be able to manage incidents when prevention is not enough.

The NCC presented the cyber resilience framework and Internet Code of Practice 2026 as initiatives that support its broader objective of helping Nigerians use the internet with greater confidence. <Cite refs={["turn771540search0","turn771540view1"]}/>

The working group could create an opportunity for participants to discuss where their responsibilities overlap and how information can be shared appropriately. Such cooperation may be especially important when an incident involves several networks or service providers.

Nevertheless, the public announcement does not provide evidence that a particular cyberattack has been prevented or that Nigeria’s digital infrastructure has already become more secure as a result of the new group. Those are outcomes that would require separate evidence and ongoing assessment.

Why the initiative matters to businesses and consumers

Nigeria’s digital economy relies on people being willing and able to use online services. Businesses need customers to trust digital transactions, organisations need reliable networks to serve users, and consumers need confidence that their personal information will not be handled carelessly.

A more coordinated approach to internet governance could support that confidence if it leads to clearer responsibilities and more consistent implementation of safeguards. It may also help stakeholders identify emerging problems before they become more difficult to manage.

For small businesses, online platforms can provide access to customers beyond their immediate locations. Digital payment tools can make transactions more convenient, while online communication can reduce some operating costs. But a fraud incident, account compromise or loss of customer data can damage confidence and impose costs that smaller businesses may struggle to absorb.

For individuals, the risks can involve both money and personal information. A fraudulent message may attempt to obtain a payment, while an impersonation scheme may exploit trust in a known organisation. In other cases, people may struggle to determine how to complain when an online service fails or their information is misused.

The NCC’s initiative recognises that these questions are connected to how the internet is governed, not simply to whether people can connect to it. The commission’s stated aim is to encourage practical cooperation and a more secure, accountable and inclusive digital environment. <Cite refs={["turn771540search0","turn771540view2"]}/>

Stakeholders and implementation will be critical

The symposium brought together organisations involved in internet governance and telecommunications. The NCC’s account and subsequent reporting identified groups including the African Network Information Centre, the Nigeria Internet Registration Association, the West Africa Internet Governance Forum, the Association of Telecom Companies of Nigeria and the Association of Licensed Telecommunications Operators of Nigeria among participants. <Cite refs={["turn771540view1","turn771540search5"]}/>

Their involvement reflects the range of interests affected by internet governance. Telecommunications operators manage networks; internet service providers connect users; technical organisations contribute to internet infrastructure and administration; and civil society and academic institutions can bring perspectives on rights, research and the experiences of internet users.

A continuing working group could help bring those perspectives into discussions about implementation. It could also give participants a place to identify problems that cannot be addressed effectively through isolated actions by individual organisations.

For the initiative to remain useful, however, it will need a clear purpose and a way to show progress. Regular engagement can help maintain momentum, but stakeholders and the public will ultimately need to see whether discussions lead to practical guidance, better coordination or other identifiable improvements.

The NCC has not yet published, in the materials reviewed for this report, a detailed schedule of the working group’s meetings, a list of specific deliverables or a set of public performance indicators. These details should not be assumed. They are among the areas that future announcements could clarify.

What Nigerians should watch next

The next stage to watch is how the Internet Governance Working Group moves from its establishment to sustained activity. Relevant developments could include the publication of priorities, further guidance on the Internet Code of Practice 2026, stakeholder consultations and information about how progress will be evaluated.

Users and businesses should also watch for official communications explaining their responsibilities and available channels for reporting online safety, privacy or cybersecurity concerns. Any new procedures should be checked against announcements from the responsible authority rather than inferred from the existence of the working group.

The NCC’s initiative is part of a wider discussion about how digital services can remain useful while reducing risks to the people who rely on them. The growing use of AI makes that discussion more urgent, but technological development and effective governance must progress together if users are to benefit from innovation without being left exposed to preventable harm.

The commission has called for stakeholders to engage candidly and constructively and to work towards practical action. Whether the new group achieves that objective will depend on continued participation, clear responsibilities and the consistent implementation of agreed measures. <Cite refs={["turn771540search0","turn771540view1"]}/>

A step towards a more accountable digital environment

The establishment of the Internet Governance Working Group gives Nigeria’s communications stakeholders a continuing platform to address online fraud, AI-related risks, privacy concerns and other issues affecting internet users.

The NCC has linked the initiative to its Internet Code of Practice 2026 and the Cyber Resilience Framework for the Nigeria Communication Sector. Both frameworks, according to the commission, are intended to support a safer and more resilient digital environment. <Cite refs={["turn771540search0","turn771540search5"]}/>

The announcement is a significant institutional step, but it should not be mistaken for proof that the problems identified have already been solved. The working group’s value will be measured by what follows: whether stakeholders coordinate more effectively, whether implementation gaps are addressed and whether users gain greater confidence in the services they rely on.

For Nigerians navigating an increasingly digital economy, the central question is not only how quickly technology advances, but whether the institutions and organisations responsible for it can keep pace with the risks. The NCC’s new platform creates an opportunity to address that question through continued cooperation and practical implementation.

Comments