AI agents for compliance teams in the public sector in Nigeria

Nigerian ministries, departments and agencies can use AI agents to check procurement files against approval thresholds, track freedom of information requests, monitor asset declaration deadlines, triage public complaints raised online and build their Nigeria Data Protection Act 2023 records. Approvals, disclosures and public statements stay with accountable officers, and the Nigeria Data Protection Commission oversees personal data.

What do compliance teams in Nigerian public bodies spend their time on?

Compliance in a Nigerian federal or state ministry, department or agency is usually spread across procurement, legal, internal audit and public relations units, often with records still on paper. The duties are demanding.

Procurement. Public procurement law sets thresholds above which procurements need higher-level approvals and prior review, and requires open competition, documented evaluation and records that auditors and anti-corruption agencies can examine. Splitting contracts to stay under thresholds is a known risk.

Freedom of information. The public can request records held by public institutions, which must respond within set periods or give reasons for refusal. Many institutions struggle to locate records quickly.

Asset declarations and conduct. Public officers must declare their assets on assumption and leaving of office and at set intervals. Anti-corruption agencies investigate abuse of office and procurement fraud.

Public complaints. Citizens increasingly raise complaints about services on social media, where a public body's response, or silence, is visible to everyone.

Personal data. Public bodies hold large volumes of identity, tax, health and welfare data, and the Nigeria Data Protection Act 2023 applies to them.

Where can agents help?

The depth of each use sets how far an agent may act: 1 reads, 2 drafts for a person, 3 executes routine work within bounds.

1. Procurement threshold checks (depth 1). The agent reads procurement records and checks that each award had the approvals its value required, and flags groups of awards to the same supplier, close in time, that together exceed a threshold. This is the most Nigeria-specific use and one with direct value to accounting officers and auditors.
2. FOI request tracking and drafting (depth 2). The agent logs requests, tracks deadlines, locates digitised records and drafts responses for the legal unit.
3. Asset declaration tracking (depth 3). The agent tracks officers' declaration due dates from personnel records and sends internal reminders. It does not see the declarations' contents.
4. Public complaint triage (depth 2). The agent reads complaints raised on the institution's channels and social media, classifies them by service, urgency and whether personal data is involved, and drafts a reply for the public relations unit. Whether an agent should post replies itself is covered in can an AI agent respond to public reviews and social media posts.
5. NDPA records (depth 2). The agent drafts the record of processing activities from system and project documentation.

What stays with officers?

Procurement approvals and findings. Approving an award, or concluding that a procurement was split to avoid review, rests with accounting officers, tenders boards, auditors and investigators.

FOI decisions. Whether to release a record, and which exemption applies, is decided by the institution's designated officer.

Public statements. Replies on social media are statements of the institution. A person approves and posts each one, especially where the complaint involves an individual's personal data or a dispute.

Disciplinary and referral decisions. Referring an officer to an anti-corruption agency, or acting on a late declaration, is for the appropriate authority.

Data protection decisions. Whether a breach must be notified to the Commission stays with the data protection officer and management.

Which Nigerian rules apply?

Nigeria has no AI-specific law in force. Public bodies are governed by public law, procurement and information law, and the Nigeria Data Protection Act 2023. The broader picture is in how AI agents are regulated in Nigeria.

Nigeria Data Protection Act 2023 and the Nigeria Data Protection Commission. The Act applies to public and private data controllers. It requires a lawful basis, purpose limitation, data minimisation and security, protects sensitive personal data, gives individuals rights and requires breach notification. Public bodies processing data at scale have registration and audit duties. Transfers outside Nigeria need a basis under the Act, which matters if the agent's model runs abroad.

Public procurement law sets thresholds, approvals, prior review and record-keeping.

Freedom of information law sets the public's access rights and institutions' response duties.

Public officers' conduct rules require asset declarations and set standards of conduct, enforced by dedicated bodies.

The CBN regulates banks and payment firms, which matters to public bodies only through the payment channels they use.

This is an explanation of the rules, not legal advice; confirm how they apply to you with counsel.

How should a Nigerian public body start?

Days 1 to 30. Begin with procurement threshold checks on one financial year's awards, using records already digitised. Confirm where the agent's model processes data and record the processing.

Days 31 to 60. Compare the agent's flags with internal audit findings for the same period. Every split procurement audit found should appear; review every extra flag with the procurement unit.

Days 61 to 90. Add FOI tracking, then public complaint triage, with the public relations unit approving every reply. French public bodies face an explicit duty to explain algorithmic decisions; see compliance agents in France's public sector for the contrast. The guide to AI compliance agents sets out the second-line principle.