# Nigeria

> Nigeria (SEC · Central Bank of Nigeria · Data Protection Commission): Securities-first, with banking access restored. Region: Middle East & Africa. Privacy with disclosure: Confidentiality is workable so long as the regulated firm can identify parties and disclose on demand.

Part of the Soda Labs Privacy Hub regulation map, which reads the instruments
themselves rather than summarising the summaries: https://www.sodalabs.xyz/privacy-hub/regulation

## Key facts

- Entry type: Jurisdiction
- Region: Middle East & Africa
- Subject: Securities-first, with banking access restored
- Authority: SEC · Central Bank of Nigeria · Data Protection Commission
- Stance on on-chain confidentiality: Privacy with disclosure. Confidentiality is workable so long as the regulated firm can identify parties and disclose on demand.
- Tags: digital assets as securities, banking access restored, no AEC rule, NDPA 2023
- Canonical page: https://www.sodalabs.xyz/privacy-hub/regulation/jur-nigeria

## What it actually says

Nigeria took the securities route rather than building a bespoke crypto statute, bringing digital assets under the securities regulator through the 2025 Act while the 2022 rules continue to carry the operational detail. The more consequential shift for anyone actually operating there was the central bank reversing its 2021 banking restriction in December 2023, which restored the account access that had pushed activity into informal channels. On confidentiality specifically, the file is empty in both directions: we found no instrument restricting anonymity-enhancing assets, mixers or self-hosted wallets, and equally nothing protecting them. Read that as an unwritten question rather than as permission.

## The instruments that matter

- **Investments and Securities Act 2025**: repeals the 2007 Act and formally recognises digital assets as securities under securities regulator oversight
- **SEC Rules on Issuance, Offering Platforms and Custody of Digital Assets, 11 May 2022**: still the operative conduct rules, with Part D covering virtual asset service providers, supplemented by the Accelerated Regulatory Incubation Programme
- **Central bank reversal, December 2023**: guidelines permitting banks to operate accounts for virtual asset service providers, reversing the February 2021 restriction
- **No published position on confidentiality**: we found no Nigerian instrument addressing privacy coins, mixers or unhosted wallets

## Sources

- [Nigeria SEC rules and regulations](https://sec.gov.ng/our-mandate/regulation/rules-and-regulations/)
- [Nigeria Data Protection Commission](https://ndpc.gov.ng/)

## Related entries

- [Seychelles](https://www.sodalabs.xyz/privacy-hub/regulation/jur-seychelles): No anonymity rule, but the offshore route is closing
- [Ghana](https://www.sodalabs.xyz/privacy-hub/regulation/jur-ghana): The regulator that put self-custody in writing
- [Israel](https://www.sodalabs.xyz/privacy-hub/regulation/jur-israel): Light on-chain, heavy on data protection
- [Bahrain](https://www.sodalabs.xyz/privacy-hub/regulation/jur-bahrain): A listing test written against effects, not asset names
- [Kenya](https://www.sodalabs.xyz/privacy-hub/regulation/jur-kenya): The ban written into primary legislation, not a rulebook
- [Qatar](https://www.sodalabs.xyz/privacy-hub/regulation/jur-qatar): Exclusion by perimeter rather than prohibition