On 7 May 2015, the Cybercrimes (Prohibition, Prevention, etc.) Bill, 2015 passed by the House of Representatives and was sent to the President for assent. The Bill creates a Cybercrime Advisory Council to formulate policies, promote cybersecurity research, and facilitate information sharing. Additionally, it establishes a National Cybersecurity Fund, financed through a levy on electronic transactions, to support cybersecurity initiatives. The legislation imposes obligations on financial institutions and service providers to safeguard data and report cybersecurity incidents, such as attacks, intrusions, or disruptions, immediately to the National Computer Emergency Response Team (CERT) Coordination Center (Section 21(1)). Failure to report such incidents within 7 days of their occurrence constitutes an offence, punishable by a mandatory fine of NGN 2 million and potential denial of internet services (Section 21(3)). The Bill also criminalises cyber offences, such as unauthorised access, system interference, and cyber terrorism, with penalties including imprisonment, fines, and asset forfeiture. Furthermore, it facilitates international cooperation in cybersecurity investigations and evidence preservation.
Original source