NITDA NIGERIA CLOUD COMPUTING POLICY

A Policy guides the adoption of cloud computing by federal government institutions, including data security and local hosting requirements. It targets government agencies and cloud service providers in Nigeria. This protects data sovereignty and promotes local infrastructure development.

What Is This Policy?

NITDA's policy framework guiding the adoption of cloud computing services by federal government institutions and the development of a Nigerian cloud computing ecosystem, including data sovereignty, security, and local hosting requirements.

Who Does It Target?

Federal government MDAs adopting cloud services Cloud service providers operating in Nigeria NITDA as the regulatory authority Nigerian tech companies providing cloud infrastructure

What Does It Aim to Achieve?

Enable government institutions to adopt cloud computing safely and efficiently while protecting Nigerian data sovereignty, promoting local cloud infrastructure, and building Nigerian capacity in cloud services.

Key Features

Cloud Security: Prescribes security and data protection requirements for government cloud deployments. Data Sovereignty: Requires that sensitive government data be hosted within Nigerian borders. Local Providers: Promotes use of Nigerian cloud service providers and incentivises local data centre investment. Procurement Standards: Sets standards for government procurement of cloud services including vendor assessment criteria.

Current Status

Rollout Stage: Active Coverage: All federal government MDAs using cloud services Beneficiaries: Government; citizens through improved digital services; Nigerian cloud industry Funding: NITDA; Federal Government

How to Access

MDAs must conduct security assessments before migrating to cloud Foreign cloud providers: register with NITDA and comply with data localisation requirements Nigerian cloud providers: apply for NITDA cloud provider certification Application method: Engage NITDA at https://www.nitda.gov.ng

Important Terms

Critical government data must be hosted in Nigerian data centres Public cloud use requires NITDA clearance for federal institutions Cloud providers must cooperate with NITDA audits and inspections

Official Resources

Website: https://www.nitda.gov.ng Contact: National Information Technology Development Agency (NITDA)

Legal Framework

Issued under the National Information Technology Development Agency Act 2007, which empowers NITDA to issue guidelines, frameworks, and standards for ICT development in Nigeria. Operates alongside the Nigerian Communications Act 2003, the Cybercrimes (Prohibition, Prevention, Etc.) Act 2015, the Nigeria Data Protection Act 2023, and the National Digital Economy Policy and Strategy 2020-2030. Draws on the Nigeria Data Protection Act 2023, international cloud security standards including ISO/IEC 27017 and ISO/IEC 27018, the US NIST Cloud Computing standards (as comparative), and the ECOWAS Supplementary Act on Personal Data Protection.