By Simpson Global Media News Desk
The Nigerian Communications Commission (NCC) has raised concerns about the growing gap between artificial intelligence adoption and the safeguards needed to oversee its use, after a survey found that many organisations in the communications ecosystem were already using or testing AI without fully developed governance arrangements.
Findings presented at the NCC Internet Governance Symposium 2026 in Lagos on Thursday, October 15, showed that 73 per cent of respondents were using or piloting artificial intelligence, while only 39 per cent reported having an approved AI policy and 34 per cent said they applied human oversight. The results point to questions about accountability, transparency, consumer protection and the management of risks as AI becomes more embedded in digital services. (Vanguard; BusinessDay)
The survey also found that only two of 19 telecommunications licensees assessed said they were fully prepared to implement the Internet Code of Practice 2026. Nine reported partial readiness, while five said they were not prepared. The figures provided accounted for 16 of the 19 licensees surveyed, meaning the published readiness categories did not cover every licensee in the assessment. Cybersecurity obligations and provisions relating to artificial intelligence were identified among the most difficult areas. (Vanguard; New Telegraph)
The findings have placed the spotlight on how Nigeria’s communications industry can continue adopting new technologies while establishing clear rules for their responsible use. The NCC says it plans to publish implementation guidelines, frequently asked questions and compliance templates, as well as organise workshops for licensees that need assistance understanding their obligations. (BusinessDay)
Survey reveals a gap between AI use and oversight
The survey was presented by Dr Ibiso Kingsley George, the NCC’s head of Internet Governance, during the commission’s Internet Governance Symposium in Lagos. According to reports of the presentation, the research drew 47 responses from organisations and stakeholders across industry, academia and civil society. Participants included mobile network operators, internet service providers, academic institutions and representatives of the technical community. (Vanguard; BusinessDay)
The headline finding was that 73 per cent of respondents were using or piloting AI in live operations. However, only 39 per cent reported having an approved AI policy, while 34 per cent said they applied human oversight to their AI systems. The figures suggest that the adoption of AI tools is progressing faster than the establishment of formal internal policies and oversight processes among those surveyed. (New Telegraph; BusinessDay)
The results do not mean that every organisation using AI lacks safeguards, nor do they establish that the entire Nigerian telecom industry has the same level of preparedness. The survey covered a defined group of respondents, and its findings should be interpreted within that scope. Nevertheless, the gap identified by the NCC raises a practical question for businesses: whether their internal arrangements are keeping pace with the systems they are deploying.
Artificial intelligence can be used in a range of business activities, including analysing information, supporting customer service, identifying patterns and automating repetitive tasks. In telecommunications, such tools can potentially help operators examine network performance, detect unusual activity, support customer interactions and process large volumes of operational data.
But the benefits of automation do not remove the need for responsibility. When an AI-supported system produces an incorrect answer, mishandles personal information or contributes to an unfair decision, a business needs procedures for identifying the problem, investigating it and providing an appropriate response.
A written AI policy can establish who is responsible for approving a system, what information it may use, how its performance should be assessed and what circumstances require human intervention. Oversight arrangements can also help an organisation determine whether a tool is operating as intended and whether its use creates risks for customers.
The NCC survey does not specify every AI application being used by respondents or provide a detailed risk assessment of individual systems. Its findings nevertheless indicate that governance is becoming an important part of Nigeria’s technology conversation as businesses expand their use of automated tools. (BusinessDay)
Only two licensees report full readiness for the Internet Code of Practice
The findings on AI came alongside a separate assessment of licensees’ readiness to implement the Internet Code of Practice 2026. Of the 19 licensees surveyed for that assessment, two reported being fully prepared, nine said they were partially ready and five said they were not ready. The published categories accounted for 16 licensees, leaving three outside the reported breakdown. (Vanguard)
The code is intended to support a safer and more responsible online environment. The survey indicated that cybersecurity obligations and provisions relating to AI were particularly challenging for some licensees, which asked the commission for clearer expectations, practical implementation guidance, reporting templates and step-by-step instructions. (New Telegraph; BusinessDay)
Readiness is an important consideration because regulations can be difficult to implement consistently if organisations do not understand the processes they are expected to follow. Companies may need to assign compliance responsibilities, review existing procedures, document how their systems work and train employees on new requirements.
For smaller service providers, implementation may also require additional technical and administrative resources. A company may have the expertise to deploy a new technology but lack a dedicated compliance team or a formal procedure for assessing the risks associated with its use.
The NCC’s planned guidance could help reduce uncertainty by explaining how the code applies to particular activities, what information organisations must provide and how they should demonstrate compliance. The commission has also said it will organise workshops for licensees that are not prepared. (Vanguard)
However, the publication of guidance alone will not guarantee implementation. Organisations will still need to assess their own systems, assign responsibility, allocate resources and maintain procedures that can be reviewed when their technology changes.
The readiness figures also highlight the importance of distinguishing between an organisation’s stated preparedness and its actual compliance. A company may report that it has adopted a policy, but regulators and affected stakeholders may still need evidence that the policy is being applied consistently. Clear documentation, effective oversight and meaningful accountability will therefore matter as implementation progresses.
Consumers want to know when they are interacting with AI
One of the survey’s clearest findings concerned transparency. Ninety-four per cent of respondents said consumers should be informed when they are interacting with artificial intelligence. The result indicates strong support among those surveyed for disclosure when AI is used in consumer-facing interactions. (BusinessDay; New Telegraph)
Transparency can be important when customers use automated customer-service tools, receive AI-generated responses or interact with systems that assist in making decisions. Knowing that AI is involved can help a customer understand the nature of the service and decide whether to request human assistance.
For example, a telecom subscriber who contacts a service provider about an unexplained deduction may first encounter an automated chatbot. If the tool cannot resolve the complaint, the customer needs a clear route to a human representative rather than being trapped in a repetitive automated exchange.
Similarly, if an organisation uses AI to summarise a complaint or recommend a response, it should have a way to check whether the system has misunderstood the customer’s account. A process that combines automation with appropriate human review may help improve efficiency without making customers solely responsible for correcting mistakes.
The survey also found that 40 per cent of respondents preferred periodic reporting over notice before deployment. That preference suggests that organisations may differ over how and when information about AI systems should be supplied to regulators. It does not, on its own, establish a final regulatory position or mean that advance notification is unnecessary. (New Telegraph)
The distinction between informing consumers and reporting to regulators is important. Consumer disclosure concerns whether people understand that they are interacting with AI. Regulatory reporting concerns how authorities monitor the deployment of systems and assess compliance with applicable rules. Both may contribute to accountability, but they serve different purposes.
The NCC has said it intends to clarify the definition of AI systems and explain applicable prior-notification requirements under the Internet Code of Practice 2026. Licensees have asked for more detailed guidance on their obligations, while the commission plans to provide implementation material and compliance templates. (BusinessDay)
Clear guidance will be particularly important where a business uses several digital tools with different functions. Not every automated process necessarily presents the same level of risk, and organisations need to understand which systems fall within specific regulatory requirements.
Cybersecurity, privacy and online safety remain major priorities
The symposium identified cybersecurity, online safety and child protection, data protection and cross-border data flows, and AI governance among Nigeria’s leading internet-governance priorities for 2026 and 2027. The areas are interconnected because digital services depend on the collection, processing and movement of information across networks and platforms. (Vanguard; New Telegraph)
Cybersecurity remains a concern because digital services can be disrupted by unauthorised access, fraud, malicious software and attacks on infrastructure. As companies adopt more automated systems, they must also consider how those tools are secured, who can access them and whether sensitive information is being handled appropriately.
AI governance adds another layer. An organisation needs to know what data a system processes, what permissions it has, how its outputs are checked and what happens when it produces unreliable or harmful results. These considerations are particularly relevant when a tool interacts directly with customers or supports decisions affecting their access to services.
Privacy is also central. AI systems may process personal information to answer questions, classify requests or generate recommendations. Organisations must consider whether they have a legitimate basis for using the information, whether access is appropriately controlled and whether data is retained or shared in ways that create unnecessary exposure.
Cross-border data flows can complicate these questions when information is processed or stored in different jurisdictions. Organisations may need to understand where their data goes, which service providers handle it and what safeguards apply. The survey identified this area as one of the broader internet-governance priorities requiring attention. (New Telegraph)
Online safety and child protection present further challenges. Digital platforms can expose users to harmful material, deceptive content or interactions that exploit personal information. AI-generated content can add complexity because convincing text, images, audio or video may be produced at scale and used in misleading ways.
The NCC’s emphasis on cooperation reflects the fact that these issues extend beyond the responsibilities of a single telecom regulator. Network operators, internet platforms, public institutions, technology providers, researchers and civil society groups may all have relevant roles in improving the safety and reliability of online services.
NCC launches Internet Governance Working Group
The commission formally launched its Internet Governance Working Group during the symposium, creating a platform intended to sustain engagement beyond the event. The group is expected to help stakeholders discuss internet-governance challenges, contribute to policy conversations and address gaps in participation. (Vanguard; New Telegraph)
Speaking at the event, NCC Executive Commissioner for Technical Services Abraham Oshadami, who represented Executive Vice Chairman Aminu Maida, said the questions raised by AI—including harmful content, fraud, privacy, accountability and the protection of children—could not be resolved by one institution alone.
He called for informed dialogue and cooperation across the communications sector and beyond it, stressing the need for stakeholders to turn discussions into practical action. (New Telegraph)
The working group could provide a regular forum for organisations to raise implementation problems, share experience and identify areas where regulatory clarification is needed. Its effectiveness will depend on whether participation is sustained and whether discussions lead to practical outcomes.
A continuing forum may also help the commission hear from organisations that do not usually participate in internet-governance events. Businesses and institutions that are less familiar with the process may otherwise find it difficult to contribute to policy discussions that affect their operations.
The survey indicated that 53 per cent of respondents had participated in the Nigeria Internet Governance Forum, while 40 per cent said they had not attended any internet-governance event. Five organisations reported no engagement, and 34 per cent were unfamiliar with the permanent mandate of the Internet Governance Forum. (Vanguard)
The figures point to a participation gap at a time when internet policy is becoming more relevant to business operations and everyday life. Respondents cited lack of awareness, the absence of an internal mandate and the perception that internet governance was not relevant to business processes as barriers to engagement.
Yet the survey also suggested there was an appetite for greater involvement: BusinessDay reported that 46 of the 47 participating organisations expressed willingness to take part in future stakeholder consultations and workshops. That willingness could give the NCC an opportunity to broaden engagement and strengthen the practical value of the new working group. (BusinessDay)
Building trust in digital services
The NCC’s findings arrive as digital services play an increasingly important role in communications, commerce, transport and access to information. For consumers, the reliability of these services is not measured only by connection speed or the availability of an application. Trust also depends on whether personal information is protected, complaints can be resolved and service providers remain accountable when something goes wrong.
At the symposium, Oshadami noted that some Nigerians remained reluctant to use online services because of uncertainty about the associated risks and possible consequences. He pointed to the importance of internet governance in helping people use digital services with greater confidence. (BusinessDay)
Trust can be undermined when users cannot understand how a service works or find it difficult to challenge an incorrect decision. An automated system that provides inaccurate information without a clear path to human assistance may frustrate customers even if it reduces operating costs for the provider.
Conversely, businesses that communicate clearly, monitor their systems and provide meaningful routes for complaints can help consumers understand how a service is being delivered. These practices are relevant whether a company uses AI extensively or relies mainly on conventional digital tools.
The commission also highlighted the Cyber Resilience Framework for the Nigerian communications sector, which is intended to strengthen the security and resilience of the infrastructure underpinning digital services. Network resilience and AI governance are related but distinct concerns: protecting the infrastructure does not automatically answer questions about how automated systems use data or how businesses remain accountable for AI-supported decisions. (BusinessDay)
A robust approach therefore requires attention to both the underlying network and the services operating on it. Stronger cybersecurity can help protect systems against disruption, while clear governance arrangements can help organisations manage the risks arising from the technologies they deploy.
What the NCC’s planned guidance could mean for businesses
The commission says it intends to publish implementation guidelines, frequently asked questions and compliance templates for the Internet Code of Practice 2026. It also plans to organise workshops for licensees that need help preparing for implementation. (Vanguard)
For businesses, the practical value of such guidance will depend on how clearly it explains regulatory expectations. Organisations need to understand which obligations apply to them, what records they must maintain, how they should report relevant activities and when they need to notify the commission.
A clear implementation process could help companies identify gaps in their existing policies before problems arise. It could also make it easier for management teams to assign responsibilities across technical, legal, security and customer-service functions.
Businesses deploying AI may need to review how systems are selected, tested and monitored. They may also need procedures for recording important decisions, checking outputs, responding to complaints and escalating problems to human staff. The exact measures required will depend on the systems involved and the applicable rules.
For licensees that reported partial or no readiness, the immediate task is to establish what remains incomplete and determine how to address it. That may involve staff training, internal policy development, technical adjustments or the creation of reporting processes.
The NCC has not, in the information reported from the symposium, specified a timetable for every element of the planned guidance. The precise scope of particular notification requirements and the consequences associated with individual compliance failures will therefore need to be understood through official regulatory communications as they become available. (BusinessDay)
Organisations should not treat the publication of guidance as a reason to postpone basic safeguards. Establishing responsibility for AI systems, protecting customer information, monitoring automated processes and providing routes for human assistance are practical steps that can help businesses understand and manage their technology risks.
The wider implications for Nigeria’s digital economy
The survey offers a snapshot of the challenges facing a communications ecosystem that is adopting emerging technology while working through questions of regulation, skills and institutional preparedness. Its findings should not be interpreted as a comprehensive measurement of every Nigerian organisation using AI, but they provide evidence of areas that regulators and industry participants may need to address.
For the wider digital economy, the central issue is how to balance innovation with accountability. Businesses need room to test useful technologies, improve services and develop new products. Consumers, however, need confidence that digital systems will be operated responsibly and that there will be a process for addressing errors or harm.
Clear rules can help create that balance by explaining expectations before disputes arise. They can also provide a common basis for companies to evaluate their systems and for regulators to assess whether organisations are meeting their obligations.
Effective governance does not require businesses to abandon AI. Rather, it requires them to understand the technology they use, define the responsibilities attached to it and establish procedures for responding when systems do not perform as expected.
The NCC’s new working group and planned implementation resources could support this process if they provide practical guidance and encourage sustained participation. Their impact will ultimately depend on whether stakeholders follow through with measurable improvements in preparedness, transparency and oversight.
Conclusion: Adoption must be matched by responsibility
The NCC’s latest survey highlights a growing challenge for Nigeria’s communications sector: artificial intelligence is already being used or tested by many surveyed organisations, but formal policies and human oversight have not kept pace at the same level.
The finding that only two of 19 surveyed licensees reported full readiness for the Internet Code of Practice 2026 adds to the need for clearer implementation support. Cybersecurity and AI provisions were among the areas respondents found difficult, while many asked for guidance, reporting templates and more practical explanations of their obligations. (Vanguard; New Telegraph)
The commission’s plans to issue guidance, organise workshops and use its Internet Governance Working Group to maintain engagement represent its stated response to the findings. Whether those measures close the gaps will depend on the clarity of the requirements, the participation of industry and the consistency of implementation.
For consumers, the stakes include transparency, privacy, online safety and the ability to obtain human assistance when automated systems fail. For businesses, the challenge is to ensure that innovation is supported by clear accountability and appropriate risk management.
Nigeria’s technology sector can continue to benefit from AI, but adoption figures alone do not establish that systems are being used responsibly. The next measure of progress will be whether organisations can demonstrate that their technologies are governed effectively, their customers are treated fairly and their digital services remain secure and trustworthy.
The bottom line: The NCC’s survey signals that AI adoption is moving ahead of governance arrangements in parts of Nigeria’s communications ecosystem. The commission says it will provide more implementation guidance and strengthen stakeholder engagement, while businesses face the task of matching technological innovation with effective oversight and consumer protection.
Comments
Post a Comment