JUSTICIABILITY OF CLAWBACK CLAUSE AND FREEDOM OF CONTRACT UNDER THE NIGERIAN EMPLOYMENT LAW

2.1. DEFINITION AND OVERVIEW OF CLAWBACK CLAUSE

2.4.1. REASONABLENESS AND FAIRNESS IN CLAWBACK CLAUSE ENFORCEMENT

2.4.2. ENFORCEABILITY OF CLAWBACK CLAUSES

2.5. IMPACT OF CLAWBACK CLAUSES ON FREEDOM OF CONTRACT

2.5.1. UNFAIR CONTRACT TERMS AND NIGERIAN LAW

2.5.2. PROTECTION OF EMPLOYEES' RIGHTS AND INTERESTS

This paper critically examines the justiciability of Clawback clauses in employment contracts under Nigerian law, exploring the tension between contractual autonomy and public policy considerations. Clawback clauses, increasingly prevalent in Nigerian employment contracts, have sparked controversy over their enforceability and impact on the principle of freedom of contract. Through a comprehensive analysis of relevant statutes, case laws, and contractual implications, this paper investigates the extent to which clawback clauses infringe upon employees' rights and interests. Nigerian courts' contextual approach to enforcing clawback clauses is examined, balancing contractual freedom with reasonableness and fairness considerations. The paper reveals that the absence of clear legislative guidelines and inconsistent judicial decisions have created uncertainty and ambiguity, undermining employee protection. It argues that the current legal framework fails to provide adequate safeguards for employees, compromising fairness and justice. To address these concerns, this paper proposes a reformulated approach to clawback clause enforcement, emphasizing transparency, proportionality, and employee protection. The paper recommends legislative reforms to clarify clawback clause enforceability, judicial guidance on reasonable and fair clause implementation, and contractual best practices ensuring transparency and employee consent. This research contributes to the ongoing debate on the intersection of employment law and contract law in Nigeria. Its findings and recommendations offer valuable insights for policymakers, legal practitioners, and human resource professionals.

Clawback clauses, employment contracts, Nigerian employment law, freedom of contract, justiciability, public policy considerations.

The notion of employment contracts has undergone significant transformations over the years, with various clauses and provisions aimed at safeguarding the interests of both employers and employees. One such clause, the clawback clause, has gained considerable prominence in recent times. A clawback clause is a contractual provision that enables employers to recover certain benefits or payments made to employees under specific circumstances, such as termination of employment, breach of contract, or failure to meet performance targets. This provision has sparked intense debate among legal practitioners, human resource experts, and policymakers in Nigeria.

In Nigeria, the increasing adoption of clawback clauses in employment contracts has raised concerns about their implications on employment relationships. Proponents argue that these clauses promote accountability and fairness, ensuring that employees do not unjustly enrich themselves at the expense of their employers. Conversely, opponents contend that clawback clauses infringe upon employees' rights and freedoms, potentially leading to exploitation and unfair labor practices. The Nigerian employment landscape is characterized by a complex interplay of statutory provisions, judicial decisions, and contractual agreements. The Labour Act and Employee Compensation Act provide a framework for employment relationships, but the absence of clear guidelines on clawback clauses has created uncertainty and ambiguity.

This ambiguity has led to conflicting decisions in Nigerian courts, with some upholding the enforceability of clawback clauses and others declaring them void. The lack of clarity has far-reaching implications for employees, employers, and the broader labor market. Employers may struggle to recover investments made in employee training and development, while employees may face unfair deductions from their salaries or benefits.

This paper seeks to explore the justiciability of clawback clauses in Nigerian employment contracts, examining the tension between contractual autonomy and public policy considerations. By analyzing relevant statutes, case laws, and contractual implications, this research aims to provide valuable insights into the complexities surrounding clawback clauses and their impact on employment relationships in Nigeria. This study will contribute to the ongoing debate on the intersection of employment law and contract law in Nigeria, offering recommendations for policymakers, legal practitioners, and human resource professionals.

The paper will also explore the implications of clawback clauses on employee-employer relationships, including issues of trust, loyalty, and performance. Furthermore, it will investigate the role of regulatory bodies, such as the National Industrial Court and the Ministry of Labour and Employment, in enforcing clawback clauses and protecting employee rights. Through a critical examination of Nigerian case laws, including 

Peugeot Automobile Nigeria Ltd v. Ogheneforo

Nigerian National Petroleum Corporation v. Okpomu.

 Thus, this paper seeks to contribute to the development of a more equitable and effective employment law framework in Nigeria, one that balances the interests of employers and employees while promoting fair labor practices and decent work. By shedding light on the complexities surrounding clawback clauses, this paper aims to stimulate informed discussion and debate among policymakers, legal practitioners, human resource professionals, and other stakeholders in the Nigerian employment landscape.

DEFINITION AND OVERVIEW OF CLAWBACK CLAUSE

A clawback clause is a contractual provision that enables employers to recover certain benefits, payments, or incentives previously made to employees under specific circumstances. This provision has become increasingly common in employment contracts, particularly in industries where employees receive significant bonuses, benefits, or equity-based compensation. According to Ejiofor, clawback clauses are essential in ensuring that employees do not unjustly enrich themselves at the expense of their employers. By including these provisions, employers can protect their investments and maintain a fair employment relationship.

The concept of clawback clauses is rooted in the principle of restitution, which aims to prevent unjust enrichment. In the Nigerian context, clawback clauses have gained significant attention in recent years, particularly in the wake of high-profile corporate scandals and financial crises. As employers seek to mitigate risks and protect their investments, the use of clawback clauses has become more widespread. For instance, the Central Bank of Nigeria's Code of Corporate Governance recommends the use of clawback clauses to ensure accountability and transparency in the financial sector.

The structure and scope of clawback clauses vary depending on the employer's objectives and the nature of the employment relationship. Some clauses may focus on recovering specific benefits, such as signing bonuses or relocation expenses, while others may target broader categories of compensation, including salary, commissions, or equity awards. According to a study by the Society for Human Resource Management (SHRM), clawback clauses are most effective when they are clearly communicated to employees and aligned with organizational goals.

In Nigeria, the legal framework governing clawback clauses is still evolving. While there is no specific legislation regulating clawback clauses, relevant provisions in the Labour Act and the Employee Compensation Act 2010 provide some guidance on the recovery of benefits and compensation. However, as observed by Olaniyan, the lack of clear guidelines has led to inconsistencies in the application of clawback clauses, highlighting the need for further research and regulatory clarity. The ambiguity surrounding clawback clauses has significant implications for employers and employees alike. Employers may struggle to enforce these provisions, while employees may face uncertainty regarding their compensation and benefits. Moreover, the lack of clear guidelines may lead to inconsistent application of clawback clauses, potentially undermining the integrity of the employment contract.

To address these concerns, it is essential to establish a comprehensive framework governing clawback clauses in Nigerian employment law. This framework should provide clear guidelines on the structure, scope, and enforcement of clawback clauses, ensuring that they are fair, reasonable, and aligned with organizational goals. Furthermore, policymakers should consider the international best practices and benchmarks in regulating clawback clauses, such as the Dodd-Frank Wall Street Reform and Consumer Protection Act 2010 in the United States.

In addition to regulatory reforms, employers must also take steps to ensure that clawback clauses are implemented effectively and fairly. This includes clearly communicating the terms and conditions of clawback clauses to employees, providing training on their implications, and ensuring that they are consistently enforced (Fagbemi, 2019). By doing so, employers can promote transparency, accountability, and trust in the employment relationship, ultimately enhancing the effectiveness of clawback clauses.

The development of a robust framework governing clawback clauses will also have broader implications for the Nigerian labor market. It will promote fairness, transparency, and accountability in employment relationships, ultimately enhancing the overall business environment. Moreover, it will provide a benchmark for other African countries seeking to regulate clawback clauses, demonstrating Nigeria's commitment to best practices in employment law.

Clawback clauses can be categorized into various types based on their scope, triggers, and recovery mechanisms. One common classification is between conditional and unconditional clawback clauses. Conditional clawback clauses are triggered by specific events or circumstances, such as termination of employment, breach of contract, or failure to meet performance targets. Conditional clawback clauses are more effective in aligning employee interests with organizational goals. Unconditional clawback clauses, on the other hand, allow employers to recover benefits or payments without specifying particular conditions. Unconditional clawback clauses have sparked controversy, with critics arguing they may be overly broad or punitive. However, proponents contend that these clauses provide necessary flexibility for employers to address unforeseen circumstances. According to a report by the Nigerian Institute of Management, unconditional clawback clauses can be particularly useful in industries with high employee turnover rates.

Another distinction can be made between prospective and retrospective clawback clauses. Prospective clawback clauses apply to benefits or payments made after the clause takes effect, whereas retrospective clauses allow employers to recover payments made prior to the clause's implementation.

Some clawback clauses are designed to recover specific types of benefits, such as signing bonuses, relocation expenses, or equity awards. These clauses are often tailored to address specific business needs or industry practices. For example, a study by the Harvard Business Review found that clawback clauses targeting equity awards can help mitigate executive compensation risks. The various types of clawback clauses serve distinct purposes and may be more or less suitable depending on the employment context and organizational goals. By understanding these variations, employers can design clawback clauses that effectively balance their interests with those of their employees. Furthermore, tiered clawback clauses provide for graduated recovery amounts based on the severity of the triggering event. This approach allows employers to tailor the clawback clause to specific circumstances, ensuring that the recovery amount is proportionate to the harm caused.

Hybrid clawback clauses combine elements of different types, offering employers flexibility in designing recovery mechanisms. For instance, a hybrid clawback clause might combine conditional and unconditional elements, allowing employers to recover benefits in specific circumstances while maintaining discretion in other cases.

The use of clawback clauses also varies across industries and sectors. In the financial sector, clawback clauses are often used to address concerns around executive compensation and risk-taking. In contrast, technology startups may use clawback clauses to protect intellectual property and recover investments in employee training.

In Nigeria, the increasing adoption of clawback clauses has sparked debate among policymakers and industry stakeholders. Proponents argue that these clauses promote accountability and fairness, while opponents contend that they infringe upon employee rights. As the Nigerian labor market continues to evolve, the role of clawback clauses will likely remain a contentious issue.

The principle of freedom of contract is a fundamental concept in contract law, allowing parties to negotiate and agree on terms without undue interference from external parties. This principle is rooted in the idea that individuals and organizations are best suited to determine their own interests and make decisions regarding their contractual obligations. Freedom of contract enables parties to tailor their agreements to suit specific needs, fostering flexibility and innovation in business relationships. However, this freedom is not without limits, as contractual terms must comply with statutory regulations and public policy.

In the context of employment contracts, freedom of contract enables employers and employees to bargain and agree on terms, including clawback clauses. Employers can design contracts that align with business objectives, while employees can negotiate benefits and protections. Nevertheless, employment contracts are subject to statutory regulations, such as the Labour Act and the Employee Compensation Act, which safeguard employee rights and prevent exploitation. The interplay between freedom of contract and statutory regulation ensures a balance between employer interests and employee protections.

The doctrine of laissez-faire, which underpins freedom of contract, assumes that parties are equal and capable of negotiating fair terms. This doctrine posits that government intervention in contractual relationships should be minimal, allowing market forces to dictate terms. However, critics argue that this assumption is flawed, particularly in employment contracts where power imbalances often exist between employers and employees. Vulnerable employees may be coerced into accepting unfair terms, undermining the principles of freedom of contract.

In Nigeria, the Labour Act and the Employee Compensation Act impose certain limitations on freedom of contract in employment relationships. For instance, these statutes regulate issues such as minimum wage, working hours, and termination procedures. These regulations ensure that employment contracts conform to minimum standards, protecting employees from exploitation. Furthermore, judicial decisions have established that employment contracts must conform to public policy and statutory requirements.

The courts have also played a significant role in shaping the principles of freedom of contract in Nigerian employment law. Judicial decisions have clarified the boundaries of freedom of contract, striking a balance between employer interests and employee protections. Through these decisions, the courts have ensured that employment contracts serve the interests of both parties, promoting fairness and justice in the workplace.

Nigeria's employment law framework is designed to protect employees' rights, promote fair labor practices, and govern employment relationships. The country's employment law is derived from various sources, including the 1999 Constitution of the Federal Republic of Nigeria, the Labour Act, the Employee Compensation Act, the National Industrial Court Act, the Trade Disputes Act, and the Pension Reform Act. These statutes provide a comprehensive framework for regulating employment relationships, ensuring compliance with international labor standards, and promoting economic growth.

The Nigerian Labour Act 1971 is the principal law that governs employment-related matters and the relationship between an employer and employee in Nigeria. The Act uses the word "workers" to describe employees and it defines workers in Section 91 of the Act as 

"any person who has entered into or works under a contract with an employer, whether the contract is for manual labour or clerical work or is expressed or implied or oral or written, and where it is a contract of service or a contract personally to execute any work or labour".

The Employee Compensation Act 2010 applies to all employees in the private and public sector in Nigerian. The Act imposes obligations on employers of labour in both the private and public sector of the economy throughout the Federation to deduct 1% from the monthly salary of its employees and remit it to an Employee Compensation Fund (which is the authority responsible for implementing the Act), as provided under Section 33 of the Act in event of death, injury, disease, or disability of the employee arising in course of employment.

The Act also established the Nigerian Social Insurance Trust Fund Board (NSITF) by Section 2(2) of the Act as the Board that has the power to implement the fund established under the Act. The scheme is targeted at protecting private-sector employees and their dependents from financial difficulties in the event of diseases, injury, or death associated with the employee's employment.

The Trade Union Act is another law that regulates employment-related matters in Nigeria. It defines trade union in Section 1 as "any combination of workers or employers, whether temporary or permanent, the purpose of which is to regulate the terms and conditions of employment of workers, whether the combination in question would or would not, apart from this Act, be an unlawful combination by reason of any of its purposes being in restraint of trade, and whether its purpose does or do not include the provision of benefits for its members". By the provision of this Act, every worker or employee has the right to form a trade union or join an already existing trade union.

Another law that regulates employment-related matters is the Pension Reform Act 2014, which repealed the Pension Reform Act No.2 2004. The Act was enacted to promote and govern the administration of the uniform contributory pension scheme for an organization in both the public and private sectors of the Nigerian economy.

Section 1 of the Act provides that the objectives of the Act include establishing a uniform set of rules, regulations, and standards for the administration and payments of retirement benefits for the public service of the Federal Capital Territory, the Public Service of the State Governments, the Public Service of the Local Government Councils and the Private sector. It also includes making provisions for the smooth operations of the Contributory Pension Scheme.

Section 2 of the Act further provides that the private sector employers with fifteen (15) or more employees must establish a Contributory Pension Scheme for the benefit of the employees, wherefrom retirement benefits would be paid to the employees.

Section 2(3) of the Act provides "that notwithstanding the prescribed mandatory minimum threshold stated, private sector employers with less than three (3) employees or self-employed persons are also entitled to voluntarily establish schemes, following guidelines issued by the National Pension Commission".

The principles guiding Nigerian employment law are rooted in the concepts of freedom of contract, fair labor practices, equal pay for equal work, non-discrimination, and employee protection. Employment contracts in Nigeria must comply with statutory regulations, including the requirement for written contracts, minimum wage requirements, working hours and overtime, termination procedures, and severance pay.

Nigerian employment law protects various employee rights, including the right to fair labor practices, safe working conditions, collective bargaining, strike action, and compensation for injuries. Employers, on the other hand, have statutory obligations such as payment of minimum wage, provision of safe working conditions, compliance with labor regulations, payment of taxes and social security contributions, and maintenance of employment records.

The National Industrial Court plays a crucial role in resolving employment disputes in Nigeria. Additionally, labor tribunals, arbitration, and mediation are also available mechanisms for dispute resolution. Despite these frameworks, Nigeria's employment law faces challenges, including enforcement of labor regulations, child labor and human trafficking, informal sector employment, and pension reform. The Nigerian government has initiated reforms aimed at addressing these challenges. For instance, the 2010 Employee Compensation Act provides a framework for workplace injury compensation. Furthermore, efforts are being made to strengthen labor inspections and enforcement mechanisms.

The enforceability of clawback clauses in Nigerian employment contracts has become a contentious issue, with far-reaching implications for employers and employees alike. As the use of clawback clauses becomes increasingly prevalent, concerns surrounding their justiciability have come to the fore. This section investigates the justiciability of clawback clauses in Nigeria, considering the tensions between contractual freedom, statutory regulation, and judicial oversight. Through a critical examination of relevant judicial decisions and legislative provisions, this discussion seeks to elucidate the parameters of clawback clause enforceability in Nigeria.

The enforcement of clawback clauses in Nigerian employment contracts raises critical concerns about reasonableness and fairness. Nigerian courts have established that clawback clauses must be reasonable and not punitive, ensuring employers do not exploit their bargaining power. This principle is rooted in the concept of contractual fairness, which requires that contractual terms be clear, specific, and proportionate to the employee's misconduct or failure to meet performance targets.

In determining reasonableness, courts consider various factors, including the clause's clarity, specificity, and proportionality. For instance, a clawback clause that requires an employee to repay the entire value of a signing bonus for minor misconduct may be deemed unreasonable. Similarly, a clause that imposes excessive penalties for failure to meet performance targets may be considered punitive.

Fairness is another critical factor in clawback clause enforcement. Nigerian courts assess whether the clause's enforcement would cause undue hardship to the employee, considering factors such as the employee's financial circumstances, family obligations, and length of service. The National Industrial Court has emphasized the need for fairness in clawback clause enforcement, stressing that employers must act in good faith and not abuse their contractual powers.

The interplay between reasonableness and fairness in clawback clause enforcement is nuanced. Courts must consider the specific circumstances of each case, weighing the employer's legitimate interests against the employee's potential hardship. This requires a careful balancing act, as courts seek to protect employees from exploitation while also upholding the sanctity of contractual agreements.

In practice, this means that courts may consider alternative remedies, such as repayment plans or reduced clawback amounts, to ensure that the enforcement of the clause is reasonable and fair. This approach acknowledges that clawback clauses can have significant financial implications for employees and seeks to mitigate potential hardship. Furthermore, statutory guidelines provide a framework for resolving disputes and protecting employee rights. The Nigerian Labour Act 1974 and the Employee Compensation Act 2010 emphasize the need for fairness and reasonableness in employment contracts. Reasonableness and fairness are critical considerations in clawback clause enforcement. Nigerian courts must carefully balance employer interests with employee protections, ensuring that clawback clauses are not exploited to perpetuate injustice.

The banking industry is facing unprecedented challenges in the digital age, with cyber threats and data breaches posing significant risks to financial stability, customer trust, and national security. Nigeria, with its rapidly growing digital economy and increasing reliance on online banking services, is particularly vulnerable to these threats. Despite the severity of the issue, the Nigerian legal regime's response to cyber threats and data breaches in the banking sector remains inadequate. This article provides a comprehensive and critical analysis of the Nigerian legal regime's response to cyber threats and data breaches in the banking industry. It examines the current legislative framework, including the Cybercrimes Act 2015, the Central Bank of Nigeria's (CBN) guidelines on cybersecurity, and the Nigerian Data Protection Regulation (NDPR). The study reveals significant gaps and weaknesses in the existing legal regime, including inadequate data protection laws, insufficient enforcement mechanisms, limited awareness among stakeholders, and a lack of harmonization between regulatory frameworks. The article also explores the implications of these weaknesses, including compromised customer data, financial losses, reputational damage, and erosion of trust in the banking system. Furthermore, it analyzes the impact of cyber threats and data breaches on the Nigerian economy, including the potential for systemic risk, financial instability, and decreased investor confidence. The paper concludes by proposing recommendations for strengthening the Nigerian legal regime to effectively prevent and mitigate cyber threats and data breaches in the banking industry. These recommendations include the development of comprehensive data protection laws, enhanced enforcement mechanisms, increased awareness and education among stakeholders, and improved harmonization between regulatory frameworks. By addressing these gaps and weaknesses, Nigeria can enhance the security and resilience of its banking industry, protect customer data, and promote trust and confidence in the financial system.

 Cyber threats, data breach, banking industry, Nigerian legal regime, data protection, financial security, cybersecurity, regulatory framework.

The banking industry is a critical component of any nation's economy, providing essential financial services and facilitating economic growth. However, the increasing reliance on digital technologies and online banking services has exposed the industry to unprecedented risks, including cyber threats and data breaches. These risks pose significant threats to financial stability, customer trust, and national security, making it imperative for nations to develop effective legal and regulatory frameworks to mitigate them.

Nigeria, with its rapidly growing digital economy and increasing adoption of online banking services, is particularly vulnerable to cyber threats and data breaches. The Nigerian banking industry has experienced several high-profile cyber-attacks and data breaches in recent years, resulting in significant financial losses and reputational damage. Despite these risks, the Nigerian legal regime's response to cyber threats and data breaches in the banking sector remains inadequate, with significant gaps and weaknesses in the existing legislative and regulatory frameworks.

The consequences of cyber threats and data breaches in the banking industry are far-reaching and devastating. Compromised customer data can lead to financial losses, reputational damage, and erosion of trust in the banking system. Furthermore, cyber threats and data breaches can have systemic implications, threatening financial stability and national security. A single significant cyber-attack or data breach can have a ripple effect throughout the entire financial system, leading to widespread economic disruption and social instability.

In addition to financial losses and reputational damage, cyber threats and data breaches can also result in legal and regulatory penalties for banks and financial institutions. The increasing sophistication and frequency of cyber-attacks have led to a growing demand for robust cybersecurity measures and effective incident response strategies. However, the Nigerian banking industry faces significant challenges in implementing these measures, including limited resources, inadequate infrastructure, and insufficient expertise.

The human factor also plays a significant role in the vulnerability of the banking industry to cyber threats and data breaches. Insider threats, phishing attacks, and social engineering tactics can all be used to exploit human weaknesses and gain unauthorized access to sensitive systems and data. Furthermore, the increasing use of third-party vendors and supply chain partners has expanded the attack surface, creating new vulnerabilities and risks.

In light of these challenges, it is essential to examine the Nigerian legal regime's response to cyber threats and data breaches in the banking industry. This paper aims to provide a comprehensive analysis of the current legislative and regulatory frameworks, identify gaps and weaknesses, and propose recommendations for strengthening the regime to effectively prevent and mitigate cyber threats and data breaches.

To provide a comprehensive analysis of the Nigerian legal regime's response to cyber threats and data breaches in the banking industry, it is essential to clarify key concepts and terminology. This section defines and explains the meanings of cyber threats, data breaches, cybersecurity, data protection, and other related terms to establish a common understanding and framework for the subsequent discussion.

Cyber threats refer to any potential occurrence that could compromise the security, integrity, or availability of digital information, systems, or networks. These threats can take many forms, including hacking, phishing, malware, ransomware, and denial-of-service attacks. According to a report by the International Monetary Fund (IMF), cyber threats pose significant risks to financial stability and can have far-reaching consequences for the global economy. The increasing sophistication and frequency of cyber-attacks have led to a growing demand for robust cybersecurity measures and effective incident response strategies.

Cyber threats can be categorized into various types, including network threats, application threats, data threats, and physical threats. Network threats involve attacks on network infrastructure, such as routers and switches, to disrupt communication or steal data. Application threats target software applications, such as vulnerabilities in code or unauthorized access to sensitive data. Data threats involve the unauthorized access, disclosure, or destruction of sensitive data. Physical threats involve attacks on physical infrastructure, such as data centers or servers, to disrupt operations or steal equipment.

Cyber threats can originate from various sources, including nation-state actors, cybercriminals, or insiders. Nation-state actors may engage in cyber espionage or sabotage to achieve geopolitical objectives. Cybercriminals may seek financial gain through ransomware, phishing, or other types of attacks. Insiders, including employees or contractors, may intentionally or unintentionally compromise security through negligence or malicious acts.

The consequences of cyber threats can be severe and far-reaching, including financial losses, reputational damage, and compromised national security. According to a report by the Ponemon Institute, the average cost of a data breach is $3.86 million, highlighting the significant financial implications of cyber-attacks. Cyber threats can also disrupt critical infrastructure, such as power grids or healthcare systems, posing risks to public safety and well-being.

A data breach occurs when sensitive, protected, or confidential information is accessed, disclosed, or stolen without authorization. This can result from intentional or unintentional acts, including cyber-attacks, human error, or system failures. Data breaches can involve various types of data, including personal data, financial information, or intellectual property. The consequences of a data breach can be severe, including financial losses, reputational damage, and legal liabilities. the average cost of a data breach is $3.86 million, highlighting the significant financial implications of such incidents. Data breaches can result in significant reputational damage and loss of customer trust.

Data breaches can result from various causes, including cyber-attacks, human error, system failures, and insider threat. A study published in the Journal of Computer Security found that insider threats can be particularly damaging, as they often involve intentional or unintentional actions by individuals with authorized access to sensitive data.

The consequences of data breaches can be far-reaching, including financial losses, reputational damage, legal liabilities, and operational disruption. A study published in the Journal of Business Ethics found that data breaches can also result in significant ethical implications, including violations of privacy and trust.

Cybersecurity refers to the practices, technologies, and processes designed to protect digital information, computer systems, and electronic data from unauthorized access, use, disclosure, disruption, modification, or destruction . This includes protection against malware, viruses, Trojan horses, spyware, adware, ransomware, and other types of malicious software that can compromise sensitive information or disrupt business operations. Effective cybersecurity measures involve a combination of technical solutions, such as firewalls, intrusion detection systems, and encryption, as well as human-centered approaches like security awareness training, incident response planning, and continuous monitoring.

The importance of cybersecurity in today's digital age cannot be overstated, as the frequency and severity of cyberattacks continue to rise. A single data breach can result in significant financial losses, reputational damage, and legal liability for organizations. Moreover, cybersecurity threats are becoming increasingly sophisticated, with attackers using advanced techniques like artificial intelligence, machine learning, and social engineering to evade detection and exploit vulnerabilities. Therefore, a proactive and multi-layered approach to cybersecurity is essential for protecting sensitive information and preventing cyber threats.

Cybersecurity is a shared responsibility that requires collaboration between individuals, organizations, and governments. It involves implementing robust security controls, conducting regular risk assessments, and staying informed about emerging threats and technologies. Furthermore, cybersecurity is not just a technical issue but also a business imperative, as it directly impacts an organization's bottom line, customer trust, and competitive advantage. By prioritizing cybersecurity, organizations can safeguard their digital assets, maintain business continuity, and ensure the confidentiality, integrity, and availability of sensitive information.

In the context of the Nigerian banking industry, cybersecurity is particularly crucial due to the sector's reliance on digital channels and the increasing threat of cyberattacks. Banks must adopt a comprehensive cybersecurity framework that addresses people, processes, and technology to mitigate risks and protect customer data. This includes implementing robust access controls, encrypting sensitive data, and conducting regular security audits to identify vulnerabilities and improve incident response capabilities. By doing so, Nigerian banks can ensure the security and integrity of their digital platforms, maintain customer trust, and comply with regulatory requirements.

3.0. OVERVIEW OF THE CURRENT STATE OF NIGERIAN BANKING INDUSTRY

The Nigerian banking industry has undergone significant changes in recent years, with a growing number of financial institutions offering a range of services to individuals, businesses, and governments. As of 2022, there are 23 commercial banks, 6 merchant banks, and over 900 microfinance banks operating in Nigeria.

The market size of the Nigerian banking industry has grown steadily over the years, with total assets reaching ₦53.6 trillion (approximately $130 billion USD) in 2021. This growth can be attributed to increased economic activities, a growing middle class, and improved banking services.

Some key players in the Nigerian banking industry include First Bank of Nigeria, Guaranty Trust Bank, Zenith Bank, Access Bank, and United Bank for Africa (UBA). These banks have a significant market share and offer a range of services, including retail, corporate, and investment banking. Retail banking services cater to individual customers, providing services like savings accounts, loans, and credit cards. Corporate banking services, on the other hand, focus on businesses, offering services like cash management, trade finance, and corporate lending. Investment banking services include advisory services, capital raising, and mergers and acquisitions.

In addition to these services, Nigerian banks have also embraced digital transformation, offering online banking, mobile payments, and digital wallets to enhance customer experience and convenience. Fintech innovations have also disrupted the industry, with companies like Interswitch, Paystack, and Flutterwave offering payment processing, digital payments, and other financial services. This transformation has led to the adoption of online banking, mobile payments, and digital wallets, enabling customers to access banking services remotely and conveniently.

Online banking platforms have enabled customers to perform various transactions, such as bill payments, fund transfers, and account management, from the comfort of their homes or offices. Mobile payment solutions, such as USSD codes and mobile apps, have also simplified transactions, allowing customers to make payments, check balances, and transfer funds using their mobile devices.

Digital wallets, another innovative solution, have enabled customers to store their payment information securely and make transactions effortlessly. These wallets have also facilitated the growth of e-commerce in Nigeria, enabling customers to make online payments seamlessly.

Fintech innovations have also disrupted the Nigerian banking industry, with companies like Interswitch, Paystack, and Flutterwave offering payment processing, digital payments, and other financial services. These fintech companies have leveraged technology to provide innovative solutions, such as payment gateways, online lending platforms, and digital savings platforms, which have enhanced financial inclusion and improved access to financial services.

Interswitch, for instance, has developed a payment gateway that enables businesses to accept online payments, while Paystack has created a platform for online transactions, simplifying payment processes for businesses and individuals. Flutterwave, on the other hand, has developed a digital payments platform that enables businesses to accept payments from customers globally.

These innovations have transformed the Nigerian banking industry, enabling customers to access financial services more conveniently, efficiently, and securely. As the industry continues to evolve, it is expected that digital transformation and fintech innovations will play a significant role in shaping the future of banking in Nigeria.

4.0. CYBER THREATS IN NIGERIA BANKING INDUSTRY

Cyber threats are a significant concern for the Nigerian banking industry, with various types of threats targeting banks' cyber security systems. Phishing attacks, for instance, are a common threat, where attackers send fraudulent emails or messages to trick bank customers into revealing sensitive information. Malware attacks are another threat, where malicious software is used to compromise bank systems, steal data or disrupt operations.

Ransomware attacks have also been reported in Nigerian banks, where attackers encrypt sensitive data and demand payment in exchange for the decryption key. Other types of cyber threats faced by Nigerian banks include denial-of-service attacks, SQL injection attacks, and cross-site scripting attacks.

According to a report by PwC, the number of cyber-attacks in Nigerian banks increased by 25% in 2021 compared to the previous year, with 80% of banks experiencing at least one cyber-attack. Another report by Ernst & Young found that 70% of Nigerian banks reported financial losses due to cyber-attacks, with the average loss per incident being ₦15 million (approximately $37,500 USD).

Thus, Nigerian banks' cyber security systems are vulnerable to attacks due to various factors, including inadequate cyber security measures, lack of awareness and training among staff, and outdated technology. Additionally, the increasing use of digital channels and online banking services has created new vulnerabilities that attackers can exploit.

Nigerian banks' cyber security systems are vulnerable to attacks due to a combination of factors, including:

i. Inadequate cyber security measures: Many Nigerian banks lack robust cyber security measures, such as firewalls, intrusion detection systems, and encryption technologies, making them easy targets for attackers.

ii. Lack of awareness and training among staff: Bank staff may not be adequately trained to identify and respond to cyber threats, making them vulnerable to social engineering attacks and other types of cyber-attacks.

iii. Outdated technology: The use of outdated technology, such as legacy systems and unsupported software, can create vulnerabilities that attackers can exploit.

iv. Increasing use of digital channels and online banking services: The growing adoption of digital channels and online banking services has created new vulnerabilities that attackers can exploit, such as phishing attacks, malware attacks, and denial-of-service attacks.

v. Insufficient incident response planning: Many Nigerian banks lack effective incident response plans, making it difficult for them to respond quickly and effectively in the event of a cyber-attack (Ibidapo-Obe, 2020).

vi. Lack of collaboration and information sharing: Nigerian banks may not be sharing information and best practices on cyber security threats and vulnerabilities, making it difficult to stay ahead of attackers (Ernst & Young, 2022).

vii. Inadequate regulatory framework: The regulatory framework for cyber security in Nigeria may not be robust enough to ensure that banks are taking adequate measures to protect themselves against cyber threats.

viii. Limited resources: Some Nigerian banks may not have the necessary resources, such as budget and personnel, to invest in robust cyber security measures.

ix. Third-party vulnerabilities: Nigerian banks may be vulnerable to attacks through third-party vendors and service providers, such as IT contractors and cloud service providers.

These factors create a complex and challenging cyber security landscape for Nigerian banks, requiring a comprehensive and multi-faceted approach to address these vulnerabilities and protect against cyber threats.

5.0. DATA BREACHES IN NIGERIAN BANKING INDUSTRY

Data breaches in the Nigerian banking industry have become a recurring decimal, posing significant risks to financial stability, customer trust, and national security. The increasing reliance on digital channels and online transactions has created new vulnerabilities, making banks a prime target for cybercriminals.

Hence, Nigerian banks have experienced a surge in data breaches in recent years. According to a report by the Nigerian Inter-Bank Settlement System (NIBSS), there were 3,500 reported cases of cyberattacks on Nigerian banks in 2020 alone. Another study revealed that 70% of Nigerian banks have experienced at least one data breach in the past two years. These breaches have resulted in the theft of sensitive customer information, financial losses, and reputational damage to affected banks.

Several factors contribute to data breaches in Nigerian banks. One major cause is the lack of robust cybersecurity measures, including inadequate firewalls, weak passwords, and poor access controls. Another factor is the increasing use of mobile banking and online transactions, which creates new vulnerabilities. Insider threats, such as employee negligence or malicious activities, also pose a significant risk. Furthermore, the lack of awareness and training among bank employees and customers has contributed to the prevalence of data breaches.

Data breaches in Nigerian banks have severe consequences, including financial losses, reputational damage, and legal liabilities. A study estimated that the average cost of a data breach in Nigeria is approximately ₦1.4 billion. Moreover, breaches can lead to the loss of customer trust, resulting in reduced business and revenue. In addition, data breaches can compromise national security, as sensitive information may fall into the wrong hands.

Although the Central Bank of Nigeria (CBN) has implemented various regulations to mitigate data breaches in the banking industry. The CBN's Cybersecurity Framework 2019 requires banks to implement robust cybersecurity measures, including encryption, firewalls, and access controls. The Nigerian Data Protection Regulation (NDPR) 2019 also mandates banks to protect customer data and report breaches within 72 hours. However, the effectiveness of these regulations depends on strict enforcement and compliance by banks.

This framework sets out minimum cybersecurity requirements for banks and other financial institutions, mandating them to encrypt sensitive customer data, both in transit and at rest, to prevent unauthorized access. Additionally, banks must configure firewalls to restrict access to their networks and systems, ensuring that only authorized personnel and systems can access sensitive data. Furthermore, banks must implement robust access controls, including multi-factor authentication, to ensure that only authorized personnel can access sensitive data and systems.

The Nigerian Data Protection Regulation (NDPR) 2019 also plays a crucial role in protecting customer data. The NDPR mandates banks to protect customer data from unauthorized access, disclosure, or breach, and to report data breaches to the National Information Technology Development Agency (NITDA) within 72 hours of discovery. Banks must also appoint a Data Protection Officer to oversee data protection compliance and respect customers' rights to access, correct, and delete their personal data. However, the effectiveness of these regulations depends on strict enforcement and compliance by banks, which can be challenging due to lack of resources, poor awareness, inadequate enforcement, and limited capacity.

In addition, banks must ensure compliance with the framework's requirements and undergo regular security audits and risk assessments to identify vulnerabilities and address them before they can be exploited by cybercriminals. The NDPR also requires banks to undergo regular data protection audits to ensure compliance with its requirements. By implementing these regulations, the CBN aims to ensure that banks have robust cybersecurity measures in place to protect customer data and prevent data breaches, which can have severe consequences, including financial losses, reputational damage, and legal liabilities.

The truth is that data breaches in the Nigerian banking industry pose significant risks to financial stability, customer trust, and national security. While regulatory efforts have been made to mitigate these breaches, more needs to be done to address the root causes, including inadequate cybersecurity measures, insider threats, and lack of awareness. Banks must prioritize robust cybersecurity measures, employee training, and customer education to prevent data breaches and maintain trust in the financial system.

5.1. SOME CASE STUDIES ON DATA BREACHES AND CYBER THREATS IN NIGERIAN BANKING INDUSTRY

There have been incidences related to cyber threats and data breaches in the Nigerian banking industry. For instance;

; The GTBank data breach of 2019 was a significant cybersecurity incident that exposed the personal data of over 700 customers of Guaranty Trust Bank, one of Nigeria's largest banks. The breach occurred due to a vulnerability in the bank's online platform, which allowed unauthorized access to customer information. The vulnerability was exploited by hackers, who gained access to sensitive customer data, including names, addresses, phone numbers, and email addresses. The breach was discovered in March 2019, when GTBank's security team detected suspicious activity on its online platform. An investigation was promptly launched, and it was revealed that the breach had occurred due to a weakness in the platform's code. The hackers had exploited this weakness to gain access to the customer data.

GTBank took immediate action to rectify the situation, notifying the affected customers and taking steps to prevent further breaches. The bank issued a statement apologizing for the breach and assuring customers that measures were being taken to prevent future incidents. GTBank also reported the breach to the Central Bank of Nigeria (CBN) and the Nigerian Data Protection Bureau (NDPB), in line with regulatory requirements. The breach had significant consequences for GTBank and its customers. The bank faced reputational damage and potential financial losses due to the breach. Customers whose data was exposed were at risk of identity theft and phishing attacks, and many expressed concern and frustration about the breach.

The GTBank data breach highlights the importance of robust cybersecurity measures in the banking industry. It underscores the need for regular security audits and penetration testing to identify vulnerabilities before they can be exploited by hackers. The breach also emphasizes the importance of swift action in response to a cybersecurity incident, including prompt notification of affected customers and regulatory authorities. In the aftermath of the breach, GTBank took steps to strengthen its cybersecurity measures, including implementing additional security controls and enhancing its incident response plan. The bank also provided support and guidance to affected customers, including offering free credit monitoring services to help protect against identity theft.

The GTBank data breach of 2019 was a significant incident that highlights the ongoing threat of cybersecurity breaches in the banking industry. It emphasizes the need for vigilance and robust cybersecurity measures to protect sensitive customer data and prevent future breaches.

FIRST BANK OF NIGERIA PHISHING ATTACK 2020:

 First Bank of Nigeria customers were targeted by a phishing attack that aimed to steal their login credentials and financial information. The attackers sent a convincing email to First Bank customers, claiming to be from the bank's security team. The email warned customers of a supposed security threat to their accounts and urged them to take immediate action to protect their funds. The email contained a link that appeared to lead to the bank's official website, but actually directed victims to a fake website controlled by the attackers.

The fake website was designed to look identical to First Bank's official website, with the same logo, layout, and security features. However, the website was actually a phishing site, created to steal customers' login credentials and financial information. When victims entered their details, the attackers captured the information and used it to gain unauthorized access to their accounts. The phishing attack was carried out through email, but the attackers may have also used other vectors, such as SMS or social media, to reach their victims. The attack was likely targeted at specific customers, possibly those with high account balances or frequent transaction history.

The phishing attack on First Bank of Nigeria had significant consequences for the affected customers. Many victims reported unauthorized transactions on their accounts, with some losing substantial amounts of money. The attack also damaged the bank's reputation and eroded. First Bank of Nigeria responded quickly to the attack, issuing a warning to customers about the phishing email and advising them to be cautious when receiving unsolicited messages. The bank also took steps to strengthen its security measures, including implementing additional authentication protocols and enhancing its customer education programs.

The First Bank of Nigeria phishing attack highlights the importance of vigilance and education in preventing cyber-attacks. Customers must be cautious when receiving unsolicited messages and verify the authenticity of emails and websites before entering sensitive information. Banks must also prioritize customer education and implement robust security measures to protect against phishing attacks.

The MTN MoMo data breach was a significant cybersecurity incident that occurred in 2020, where the personal data of millions of MTN MoMo customers was exposed. MTN MoMo is a mobile financial service offered by MTN, a leading telecommunications company in Africa. The breach was caused by a combination of human error and technical vulnerabilities, which allowed unauthorized access to customer data. The exposed data included sensitive information such as full names, phone numbers, email addresses, physical addresses, and financial information, including account balances and transaction history. This put customers at risk of identity theft, financial fraud, phishing attacks, and other forms of cybercrime.

The breach occurred due to a vulnerability in the MoMo system, which was accessed by a third-party contractor without proper authorization. MTN MoMo took immediate action to address the breach, including notifying affected customers, conducting a thorough investigation, enhancing security measures, and providing support and guidance to affected customers.

The incident highlighted the importance of robust cybersecurity measures, secure data handling practices, and regular security audits to prevent such incidents. It also emphasized the need for transparency and prompt communication in the event of a data breach. MTN MoMo took responsibility for the breach and worked to rectify the situation, but the incident had significant consequences for the company's reputation and customer trust.

The breach was widely reported in the media and caught the attention of regulatory authorities, who called for greater vigilance in protecting customer data. The incident served as a wake-up call for the telecommunications industry to prioritize cybersecurity and data protection. MTN MoMo has since implemented additional security measures to prevent similar incidents in the future.

the data breaches case studies in Nigeria, including the GTBank, First Bank, and MTN MoMo incidents, highlight the growing concern of cybersecurity threats in the country's financial sector. These breaches have resulted in significant financial losses, reputational damage, and compromised sensitive customer information. The root causes of these breaches, including vulnerabilities in systems, human error, and lack of robust security measures, are indicative of a larger issue - the need for a comprehensive cybersecurity framework in Nigeria.

To mitigate these risks, Nigerian financial institutions must prioritize cybersecurity, invest in robust security measures, and implement best practices to protect sensitive customer data. Additionally, regulatory authorities must strengthen data protection laws and enforcement to hold institutions accountable for data breaches. Also, a collective effort is required to address the growing threat of data breaches in Nigeria's financial sector and protect the sensitive information of millions of customers. By learning from these case studies and taking proactive measures, Nigeria can build a more secure and trustworthy financial system.

6.0. LEGAL REGIME ON DATA PROTECTION IN NIGERIAN BANKING INDUSTRY

The legal framework governing cybersecurity and data protection in Nigeria is comprised of various laws and regulations, including the Cybercrimes Act 2015, the Data Protection Regulation 2019 and the Data protection Act 2023, and the Central Bank of Nigeria's (CBN) Cybersecurity Framework 2019. The Cybercrimes Act 2015 is a comprehensive law that criminalizes various cybercrimes, including hacking, cyberstalking, and identity theft. The Data Protection Act 2023, on the other hand, focuses on protecting personal data and mandates organizations to implement robust data protection measures. The CBN's Cybersecurity Framework 2019 sets out minimum cybersecurity requirements for banks and other financial institutions.

Despite these efforts, the current legal framework has several strengths and weaknesses. One strength is that the laws and regulations are relatively new and have been enacted to address the growing threat of cybercrimes and data breaches in Nigeria. For instance, the Cybercrimes Act 2015 has been instrumental in prosecuting cybercriminals and raising awareness about cybersecurity. Another strength is that the laws and regulations are broad in scope, covering various aspects of cybersecurity and data protection. However, a major weakness is that the laws and regulations are not yet comprehensive, and there are gaps in coverage, particularly with regards to emerging technologies like artificial intelligence and blockchain. Additionally, enforcement of the laws and regulations remains a challenge, with limited resources and capacity to investigate and prosecute cybercrimes.

In comparison with international best practices and standards, Nigeria's legal framework has some way to go. For instance, the European Union's General Data Protection Regulation (GDPR) is considered a gold standard for data protection, and Nigeria's Data Protection Regulation 2019 (Now Data Protection Act 2023) can be seen as a step towards achieving similar standards. However, Nigeria's laws and regulations lack the robustness and clarity of international standards, and there is a need for continuous review and update to keep pace with emerging threats and technologies. Furthermore, Nigeria can learn from international best practices in terms of enforcement and capacity building, particularly in areas like cybersecurity awareness and incident response.

To improve the legal regime and better address cyber threats and data breaches in Nigerian banks, recommendations include the need for continuous review and update of the laws and regulations to keep pace with emerging threats and technologies. There is also a need for increased enforcement and capacity building, particularly in areas like cybersecurity awareness and incident response . Additionally, Nigeria can benefit from international cooperation and collaboration to leverage best practices and standards in cybersecurity and data protection. Finally, there is a need for increased awareness and education among banks and other organizations about the importance of cybersecurity and data protection, as well as the legal requirements and implications of non-compliance.

Thus, international cooperation and collaboration are essential for Nigeria to enhance its cybersecurity and data protection capabilities. By working with other countries and international organizations, Nigeria can leverage best practices and standards, share knowledge and expertise, and stay ahead of emerging threats. For instance, Nigeria can collaborate with the International Telecommunication Union (ITU) to develop a national cybersecurity strategy, or work with the African Union's Convention on Cyber Security and Personal Data Protection to harmonize regional cybersecurity efforts. Nigeria can participate in international cybersecurity exercises and simulations to test its preparedness and response capabilities.

Increased awareness and education are also crucial for promoting a culture of cybersecurity and data protection in Nigerian banks and organizations. This can be achieved through regular training and capacity-building programs for employees, customers, and stakeholders. The CBN's Cybersecurity Framework 2019 emphasizes the importance of cybersecurity awareness and training, and mandates banks to conduct regular cybersecurity awareness programs for employees and customers. Furthermore, Nigerian banks and organizations can learn from international best practices in cybersecurity awareness and education, such as the European Union's Cybersecurity Month initiative.

Moreover, Nigerian banks and organizations must understand the legal requirements and implications of non-compliance with cybersecurity and data protection regulations. This includes understanding the penalties and fines associated with non-compliance, as well as the reputational damage that can result from a data breach or cybersecurity incident. By prioritizing cybersecurity and data protection, Nigerian banks and organizations can build trust with customers, protect their reputation, and avoid legal and financial consequences.

Thus, Nigeria's legal framework for cybersecurity and data protection has strengths and weaknesses, and can benefit from international cooperation, increased awareness and education, and a better understanding of legal requirements and implications. By addressing these areas, Nigeria can enhance its cybersecurity and data protection capabilities, protect its banks and organizations from cyber threats, and promote a culture of cybersecurity and data protection.

Primarily, the Nigerian banking industry is increasingly vulnerable to the pervasive and evolving threat of cybercrime, which poses significant risks to financial stability, customer trust, and national security. The alarming frequency and sophistication of cyberattacks, including data breaches, hacking, and phishing, underscore the urgent need for a comprehensive and robust cybersecurity framework. While the Central Bank of Nigeria has taken commendable steps in implementing regulations and guidelines to mitigate these risks, there is a pressing need for continuous improvement, international cooperation, and increased awareness and education to address the dynamic and ever-changing nature of cyber threats.

To effectively combat cybercrime and protect sensitive customer data, Nigerian banks must prioritize the implementation of robust cybersecurity measures, including encryption, firewalls, and access controls, as well as ensure strict compliance with regulatory requirements. Furthermore, fostering a culture of cybersecurity and data protection within banks, through regular training and awareness programs, is crucial to prevent insider threats and ensure that employees are equipped to respond to emerging threats. Moreover, collaboration and knowledge-sharing between Nigerian banks, regulatory bodies, and international organizations are essential to leverage best practices, share intelligence, and stay ahead of emerging threats. By adopting a proactive and collaborative approach to cybersecurity, Nigerian banks can significantly enhance their resilience to cyber threats, protect their customers' trust, and maintain the stability of the financial system.

Thus, the effectiveness of Nigeria's cybersecurity framework will depend on its ability to adapt to the rapidly evolving landscape of cyber threats, prioritize innovation and investment in cybersecurity, and ensure that all stakeholders are aware of and committed to playing their role in protecting the nation's financial infrastructure from cybercrime.

CYBER THREATS AND DATA BREACH IN BANKING INDUSTRY: ANALYSING THE NIGERIAN LEGAL REGIME

Estate planning is a critical process that ensures the orderly management and distribution of an individual's assets upon incapacitation or death. Traditionally, many Nigerians have relied on wills to articulate their wishes regarding asset distribution. However, the evolving legal and financial landscape has spotlighted the limitations inherent in wills and highlighted the advantages of establishing legal trusts as a more effective estate planning tool.​

A will is a legal document that specifies how a person's assets should be distributed after their death. While it serves as a fundamental instrument in estate planning, the execution of a will in Nigeria often subjects the estate to probate a court-supervised process that validates the will, settles debts, and oversees the distribution of assets. This probate process can be both time-consuming and costly, potentially diminishing the estate's value and delaying beneficiaries' access to assets. Additionally, since wills become public records upon probate, they compromise the privacy of the deceased and their heirs.

In contrast, a legal trust offers a more versatile and efficient approach to estate planning. By creating a trust, a settlor transfers legal ownership of assets to a trustee, who manages them on behalf of designated beneficiaries. Trusts can be structured to operate during the settlor's lifetime (living trusts) or be activated upon their death (testamentary trusts). One of the primary advantages of a trust is its ability to bypass the probate process, facilitating the immediate and private transfer of assets to beneficiaries. This not only conserves financial resources by avoiding probate-related expenses but also ensures that beneficiaries have prompt access to their inheritance. Moreover, trusts provide enhanced control over asset management and distribution. They allow the settlor to specify detailed instructions regarding how and when beneficiaries receive assets, which is particularly beneficial in cases involving minor children or beneficiaries who may not be financially prudent. Trusts can also offer protection against creditors and legal disputes, as assets held within a trust are generally shielded from claims against the beneficiaries. Furthermore, trusts can be structured to achieve tax efficiencies, potentially reducing the overall tax burden on the estate.

While establishing a trust may involve higher initial costs and require meticulous planning, the long-term benefits often outweigh these initial investments. The flexibility, privacy, and efficiency afforded by trusts make them a compelling alternative to wills in Nigeria's contemporary estate planning landscape. By opting for a legal trust, individuals can ensure that their assets are managed and distributed in accordance with their wishes, providing peace of mind and financial security for their beneficiaries.

​Wills, while commonly used in estate planning, present several limitations in the Nigerian context:​

1. Upon a testator's death, their will must undergo probate, a legal process where the court validates the will and authorizes the executor to administer the estate. This procedure can be lengthy and complex, often delaying the distribution of assets to beneficiaries. The involvement of the probate registry, which has exclusive jurisdiction over such matters, further extends the timeline, leading to potential financial and emotional strain on the heirs.

2. Once a will is submitted for probate, it becomes a public document accessible to anyone. This exposure compromises the privacy and confidentiality of the testator's final wishes and the details of asset distribution. Consequently, sensitive family information and financial specifics are laid bare, which may not align with the testator's intentions for discretion. ​

3. Wills often prescribe a fixed scheme for asset distribution, which may not account for changing circumstances or the unique needs of beneficiaries. This rigidity can lead to situations where assets are allocated in a manner that is no longer appropriate or equitable at the time of the testator's death, potentially causing disputes among heirs and failing to address the dynamic nature of family and financial situations.

​In the realm of estate planning, establishing a legal trust offers significant advantages over traditional wills, particularly concerning asset protection, tax efficiency, and customized distribution.

i. Trusts provide a robust mechanism for safeguarding assets from creditors and legal claims. By transferring ownership of assets into an irrevocable trust, the settlor effectively removes them from their personal estate, placing them under the control of a trustee for the benefit of designated beneficiaries. This structure ensures that, since the assets are no longer legally owned by the settlor, they are generally beyond the reach of creditors or litigants seeking claims against the settlor's personal assets. This protective feature is particularly valuable in shielding family wealth from potential financial liabilities.

ii. Trusts can be strategically utilized to minimize tax liabilities and facilitate efficient wealth transfer. By placing assets into a trust, especially an irrevocable one, the settlor may reduce the size of their taxable estate, potentially lowering estate taxes upon death. Additionally, certain trust structures allow for income generated by trust assets to be taxed at potentially lower rates, depending on the jurisdiction and specific arrangements. In Nigeria, while the legal framework for private trusts is influenced by English law, careful structuring of trusts can offer tax advantages, such as deferring tax liabilities or allocating income to beneficiaries in lower tax brackets.

iii. Trusts offer unparalleled flexibility in dictating how and when assets are distributed to beneficiaries. Unlike wills, which typically result in a one-time distribution of assets, trusts can be tailored to meet specific needs and circumstances. For example, a trust can stipulate that beneficiaries receive distributions upon reaching certain ages, achieving educational milestones, or other predefined conditions. This level of customization ensures that assets are managed and disbursed in alignment with the settlor's intentions, providing for beneficiaries in a controlled and purposeful manner. Such tailored distribution plans are particularly beneficial in addressing the unique needs of minors, individuals with disabilities, or beneficiaries who may require assistance in managing substantial inheritances. 

Establishing a trust during one's lifetime serves as a strategic component of estate planning, offering mechanisms for efficient wealth transfer, provisions for incapacity, and avenues for charitable giving. Hence, legal trust is better in estate planning for the following reasons:

1. Trusts facilitate the seamless transfer of assets to beneficiaries, circumventing the often lengthy and public probate process associated with wills. By transferring assets into a trust, the settlor ensures that beneficiaries receive their inheritance promptly and privately, reducing potential disputes and maintaining confidentiality. This approach is particularly advantageous in Nigeria, where probate can be protracted and complex. ​

2. In the event of the settlor's incapacitation due to illness or disability, a trust provides a structured plan for managing their affairs. The appointed trustee assumes responsibility for handling the trust's assets, ensuring that the settlor's financial obligations are met and that their estate is managed according to their wishes. This arrangement offers peace of mind, knowing that a trusted individual or institution will oversee one's affairs during periods of incapacity. ​

3. Trusts also serve as effective vehicles for philanthropic endeavors. By establishing a charitable trust, individuals can allocate assets to support causes they are passionate about, creating a lasting legacy that reflects their values. In Nigeria, charitable trusts can be structured to fund educational initiatives, healthcare projects, or other community development programs, thereby contributing positively to society. ​

Incorporating trusts into estate planning not only ensures the efficient distribution and management of assets but also provides mechanisms to address potential future incapacities and fulfill charitable objectives, thereby offering a comprehensive approach to legacy planning.

Estate planning is a crucial aspect of financial and legacy management, and the choice between a will and a trust has significant implications for asset distribution, privacy, and efficiency. While wills are widely used, they are often burdened with probate delays, public disclosure, and rigid distribution frameworks. Trusts, on the other hand, provide a more effective mechanism for asset protection, wealth transfer, and tailored distribution strategies. By creating a legal trust during one's lifetime, individuals can ensure that their assets are managed and transferred according to their specific wishes while minimizing tax liabilities and avoiding potential legal disputes. Trusts also offer critical advantages in incapacity planning, allowing for seamless financial management in cases of disability, and they serve as powerful instruments for philanthropic endeavors through structured charitable giving.

Given the complexities of estate laws in Nigeria, the adoption of trusts as a primary estate planning tool can significantly enhance the protection and efficient allocation of wealth across generations. Therefore, individuals seeking to safeguard their assets, maintain privacy, and exercise greater control over their estate should consider trusts as a superior alternative to wills. Thus, the implementation of proper estate planning strategies through legal trusts contributes to financial security, family harmony, and the preservation of wealth for future generations.

ESTATE PLANNING 1.0: WHY CREATING A LEGAL TRUST IS BETTER THAN A WILL IN NIGERIA

The Land Use Act of 1978, as stipulated in the CAP L5 L.F.N. 2004, confers extensive authority upon the Governor of a state, granting the ability to bestow and withdraw Statutory Right of Occupancy. Consequently, the Governor assumes the role of primary land custodian within their jurisdiction, possessing the power to revoke land from individuals or corporations for public purposes. However, the utilization of this power is not without limitations. This research endeavor undertook a doctrinal analysis and case law examination to ascertain the qualifications, responsibilities, restrictions, and prerogatives associated with the exercise of such authority. The study was motivated by the presumption that the Governor possesses the capability to supersede any land acquisition interest under the guise of public purpose. Findings indicate that revocations by the Governor must adhere to established procedures and satisfy specific grounds. Therefore, it is recommended that compensation provided for land revocations intended for public purposes should not only meet legal sufficiency but also be adequate to sustain affected parties.

The enactment of the Land Use Act in 1978 can be understood as a direct response to the underlying contradictions inherent in the colonial and post-colonial dependent economic structures that have profoundly influenced Nigeria throughout history. These structures were characterized by a pseudo-capitalist system. In this context, the Act sought to address key concerns and challenges related to land ownership and utilization. Historically, land has consistently represented a vital and valuable asset essential for human existence and socio-economic development. Its intrinsic significance, coupled with its indispensable utility, underscores the critical need for ensuring equitable access to land and its proper utilization for the purpose of fostering sustainable development.

Prior to the introduction of the Land Use Act in 1978, the legal framework governing land in Nigeria drew from three primary sources. These sources included customary law, received English law (imposed during the colonial era), and existing legislation that addressed specific land-related matters. This resulted in a duality of land use systems, with distinct practices observed in the northern and southern regions. In 1962, the Land Tenure Law was enacted by the parliament of Northern Nigeria, granting the governor the authority to possess all land on behalf of the populace. In the southern region, land ownership was governed by the customary system, whereby communities, families, and individuals held freehold ownership rights. Notwithstanding the presence of land regulatory legislation, obstacles pertaining to land tenure and administration prevailed in both the northern and southern parts of the nation, impeding land acquisition by both the government and private individuals. Consequently, this reinforced the power of landlords and erected substantial hurdles. In response, the Federal Military Government established committees to investigate potential remedies for the challenges associated with land tenure and administration in Nigeria. The recommendations of the 1977 Land Use Panel formed the basis for the Land Use Act No. 6 of 1978.

There is no doubt that the Land Use Act of 1978, commonly referred to as "the Land Use Act" or simply "the Act," has had a profound transformative effect on the land tenure system in Nigeria. The Act brought about a significant change by transferring the fundamental title of land to the Governor of each state in the Federation. This transfer grants the Governor the responsibility of managing the land for the collective benefit of all Nigerians in accordance with the provisions outlined in the Act. Moreover, specific sections of the Act confer extensive powers upon the Governor in relation to land, such as authorizing the granting of rights of occupancy for any purpose, issuing certificates of occupancy, determining and collecting rent, conducting inspections of land under statutory rights of occupancy, issuing licenses for the extraction of non-mineral building materials, and giving consent for the transfer of ownership through assignment, mortgage, transfer, sublease, or other means. Any attempt to alienate such rights without the Governor's consent renders the alienation legally invalid.

The Act grants the Governor the authority to revoke land occupancy rights or acquire land for public purposes. This power has generated significant interest and controversies due to the emotional attachment people have to land. The exercise of this power has often been criticized for lacking transparency and being prone to abuse. Many individuals, companies, and communities have filed lawsuits against the government challenging the revocation of their land rights. In some cases, these actions have even led to demonstrations and riots. Given that the Governor's power to acquire land is a form of expropriation, which deprives title holders of their property rights, the Land Use Act and the Nigerian Constitution have attempted to clearly define the purposes, procedures, and rights involved in such acquisitions.

POWERS OF THE GOVERNOR UNDER LAND USE ACT

The governor, commonly elected by the populace, assumes significant practical powers and serves as the chief executive of a state. Within the specific jurisdiction, the governor possesses substantial control over government budgeting and holds the authority to appoint various officials, including judges. Power, within this context, pertains to the legal authorization to act on behalf of others and the capability to effectively carry out actions or tasks. Section 4 of the 1914 South Western Lands and Public Purposes Acquisition Act explicitly outlines the governor's empowerment to declare a purpose as one of public interest. These purposes encompass the provision of office and building premises for government operations or specific departments, the execution of works or projects sanctioned by legislation but lacking the power to acquire land except through this Act, and any purpose determined as being of public interest by both houses of parliament, whether within the same or different sessions. Consequently, these purposes are categorized as undertakings under the framework of the Compulsory Acquisition of Land Act 1925 and its amending Act, effectively treating them as projects authorized by parliamentary legislation, thereby facilitating the acquisition of lands necessary to fulfill these identified purposes.

When the governor issues a proclamation declaring a specific purpose, the promoter of the project has the authority to acquire the necessary land either through voluntary agreements or by compulsory means. However, certain conditions apply:

a. The governor must provide written direction for the acquisition of the land; otherwise, no land can be taken or required under this Act.

b. All land acquired through this Act is to be conveyed and vested in the person or officer designated by proclamation according to Section 5. If no person or officer is nominated, the land will be vested in the ruling monarch.

Webster's New Dictionary defines "public purpose" as a governmental action or directive that is intended to bring about benefits for the entire population. In the legal framework of Florida, the term "public purpose" assumes multiple meanings and provides distinct levels of protection concerning the property and financial interests of private individuals when utilized as a criterion for determining the validity of governmental actions.

Under Nigerian law, "public purposes" include:

a. Use exclusively by the government or for the general public.

b. Use by any corporate entity established by law or registered under the Companies and Allied Matters Act, provided that the government holds shares, stocks, or debentures in that entity.

c. Utilization for sanitary improvements of any nature.

d. Acquisition of land contiguous to any area or land that would experience increased value due to the construction of a railway, road, or other public works or conveniences undertaken or provided by the government.

e. To exercise authority over land necessary for or in relation to development, telecommunications, or the provision of electricity.

f. To exercise authority over land necessary for or in connection with mining activities.

g. To exercise authority over land necessary for or in connection with planned urban or rural development or settlement.

h. To exercise authority over land necessary for or in connection with economic, industrial, or agricultural development.

i. For the purpose of providing educational and other services.

The term "public purpose" as defined within the Land Use Act, similar to its counterpart in Florida Law, encompasses a range of interpretations. Its utilization as a standard for demarcating the scope of governmental actions entails varying degrees of protection afforded to private property rights and financial interests. Notably, in the context of sports venues, the emergence of the "Public Purpose Doctrine" can be traced back to the seminal legal case of State v. Daytona Beach Racing and Recreational Development Facilities District. This landmark case established a legal precedent that has influenced subsequent jurisprudence in the domain of public purpose and its application to matters concerning the development and utilization of sports facilities. In this ruling, the court established that as long as a project serves public purposes, it does not violate Articles 1 and 10 of the constitution, even if it incidentally benefits private parties. It is acknowledged that private entities operating for personal profit will derive advantages from any public advancement undertaken by the government.

Land represents the most valuable asset for both nations and individuals, playing a pivotal role in determining a nation's wealth and level of development. Consequently, every nation or state places great importance on the management and utilization of its land resources. To this end, governments seek to exert control over land use and management within their territories, and also reserve the power to acquire or access land for agricultural, industrial, and socio-economic development. This concept of land acquisition is founded upon the social contract, whereby individuals relinquish a portion of their absolute land rights to the governing authority to facilitate development, provision of social amenities, healthcare, education, and protection from external and internal threats. Compulsory acquisition serves as the philosophical foundation for this arrangement.

In a democratic framework, the government's authority to compulsorily acquire property from its citizens has traditionally been counterbalanced by recognizing individuals' right to property ownership. Hence, governments are obligated to provide fair and reasonable compensation when acquiring private property, a principle that has been enshrined in various constitutional instruments over centuries. These instruments encompass a range of historical and contemporary texts, from the Magna Carta of 1215 and the Bills of Rights in 1689 to more recent expressions like Article 17 of the Universal Declaration of Human Rights. In the Nigerian context, the right to receive reasonable compensation for the compulsory acquisition or requisition of property is safeguarded under specific constitutional provisions, notably section 31 of the 1963 Constitution, section 40(1) of the 1979 Constitution, and presently section 44(1) of the 1999 Constitution. These provisions ensure that even during periods of war or emergencies, individuals maintain a legitimate entitlement to receive just compensation when their property is subjected to compulsory acquisition or requisition.

COMPULSORY ACQUISITION OF LAND OR REVOCATION OF LAND UNDER THE LAND USE ACT

The revocation or compulsory acquisition of land holds substantial importance within the framework of the Land Use Act in Nigeria. Following a preliminary exploration of the conceptual and philosophical foundations, as well as the historical context surrounding compulsory acquisition, we shall now proceed to undertake a comprehensive examination of the powers vested in the Governor to revoke land occupancy rights or effect compulsory acquisition under the purview of the Land Use Act.

Undoubtedly, the provisions outlined in the Land Use Act bestow upon the Governor an expansive and comprehensive authority over land within their respective state. This unequivocally establishes the Governor as the supreme arbiter in matters pertaining to land within their jurisdiction. Among the various provisions enshrined in the Act, none exemplifies the magnitude of these powers more prominently than Section 28 of the Act.

SECTION 28 OF THE LAND USE ACT STIPULATES THE FOLLOWING:

a. The Governor possesses the lawful authority to revoke a right of occupancy in circumstances where an overriding public interest is present.

b. An overriding public interest, with regards to a statutory right of occupancy,

c. The occupant's improper alienation of their right of occupancy, either wholly or partially, through means such as assignment, mortgage, transfer of possession, sublease, or any other actions that contravene the provisions set forth in the Act or its accompanying regulations,

d. The necessity of the land by either the State Government or a Local Government for public purposes.

The act of overriding the public interest concerning a customary right of occupancy encompasses all the aforementioned factors, in addition to the requirement that the land is needed for the purpose of extracting building materials. Section 28(4) of the legislation stipulates that if the President issues a notice declaring that the government requires the land for public purposes, it becomes incumbent upon the Governor to revoke the right of occupancy. Furthermore, section 28(5) states that the Governor has the authority to revoke a statutory right of occupancy in the following instances:

a. violation of any provisions outlined in the certificate of occupancy as stipulated in section 10 of the Act,

b. breach of any term specified in the certificate of occupancy or any special contract formed under section 8 of this Act, and

c. refusal or neglect to accept and pay for a certificate that was originally issued to evidence a right of occupancy but was subsequently canceled by the Governor under subsection (3) of section 9 of this Act.

Section 10 of the Land Use Act states that every certificate of occupancy is deemed to include provisions requiring the holder to make payments to the Governor for any remaining improvements on the land at the time of occupation, as well as the rent determined by the Governor and any rent agreed upon or revised according to section 16 of the Act. Upon thorough analysis of Section 28(2)(a) previously examined, it becomes apparent that while it is presented as one of the grounds for revocation due to a violation of the Act's provisions, it can be argued that revocation based on this section cannot strictly be classified as a revocation on the basis of overriding public interest.

Revocation based on the aforementioned ground can be interpreted as a punitive action imposed as a consequence of non-compliance. Essentially, it entails the forfeiture of a right of occupancy due to a violation of the Act's provisions. Consequently, the provisions articulated in section 28(5) of the Act, which empower the Governor to revoke a statutory right of occupancy for contravening the terms specified in the certificate of occupancy (whether explicitly stated or implied), should be understood as supplementary to the aforementioned discussion of section 28(2)(a) of the Act. Therefore, the revocation based on non-compliance with the Act's provisions, as outlined in section 28(5), assumes a distinct role, augmenting the grounds for revocation delineated in section 28(2)(a).

However, the combined effect of section 28(2)(a) and (5) can give rise to certain complications. While some have argued that these provisions may only be invoked by the Governor to revoke or forfeit a right of occupancy in cases of fundamental breaches, such as unauthorized alienation or using the land contrary to its intended purpose, it is asserted that these provisions have a broader impact. Their literal interpretation would enable the Governor to forfeit or revoke a right of occupancy for any violation of terms in the certificate of occupancy, including failure to pay annual ground rent for a single year. Likewise, if a certificate of occupancy stipulates, as is often the case, that the holder must construct and complete specified buildings or works within two years or undertake construction valued up to N2 million, the Governor would be within their rights to revoke the right of occupancy if the buildings or works are not erected and completed within the specified timeframe.

Nevertheless, it can be contended that the stringent application of these provisions may give rise to undue hardship or unintended ramifications in specific cases. These provisions bestow upon the Governor substantial discretionary powers, potentially creating an avenue for the abuse of revocation authority. Consequently, it is imperative to restrict the power to revoke a right of occupancy solely to instances of fundamental breaches, such as unauthorized use or alienation without consent. Even in such circumstances, revocation should only occur after affording the title holder a sufficient opportunity to rectify the breach, thereby ensuring fairness and due process.

Blog Posts

JUSTICIABILITY OF CLAWBACK CLAUSE AND FREEDOM OF CONTRACT UNDER THE NIGERIAN EMPLOYMENT LAW

CYBER THREATS AND DATA BREACH IN BANKING INDUSTRY: ANALYSING THE NIGERIAN LEGAL REGIME

ESTATE PLANNING 1.0: WHY CREATING A LEGAL TRUST IS BETTER THAN A WILL IN NIGERIA

EXAMINE THE POWER OF THE GOVERNOR UNDER THE LAND USE ACT "2004" IT'S LIMITATION

LEGAL FRAMEWORK FOR PROTECTION OF FOREIGN INVESTMENT IN TELECOMMUNICATION INDUSTRY

SERVICE FAILURE BY TELECOMMUNICATIONS COMPANY: REMEDIES ACCESSIBLE UNDER THE LAW

THE SEIZURE OF NIGERIAN PRESIDENTIAL AIRCRAFT IN FRANCE: THE POSITION OF INTERNATIONAL LAW AND WAY OUT

UBOM V. GLOBACOM (NIG.) LTD. (2025) 6 NWLR (Pt. 1985) 157: LEGAL AND COMMERCIAL INSIGHTS