​Is Nigeria’s Cybercrime Act becoming a digital-age Decree 4?

By Lanre Ogundipe

“When laws meant to pursue criminals begin to pursue journalists, democracy must ask whether history is quietly repeating itself.”

Nigeria enacted the Cybercrimes (Prohibition, Prevention, etc.) Act to confront a real and growing danger. Cyber fraud syndicates were expanding, identity theft was flourishing, digital extortion was rising, and the country’s financial ecosystem faced increasing threats from criminal networks exploiting the anonymity of the internet. The law was designed as a shield—a necessary instrument to protect Nigeria’s digital economy and national security.

Few disputed the urgency of that mission.

Yet nearly a decade after its passage, an unsettling question is creeping into the national conversation: has a law created to fight cybercrime begun to cast a shadow over democratic expression?

The concern is not abstract. It arises from the widening interpretation of provisions within the Act—particularly those dealing with cyberstalking and offensive communication. Language such as “grossly offensive,” “annoyance,” and “inconvenience” appears within the statute without precise legal boundaries.

In criminal law, vagueness is not a minor drafting flaw. It is an open invitation to discretionary power.

And discretionary power, once unleashed, rarely remains confined to its original purpose.

This is where the ghost of Public Officers (Protection Against False Accusation) Decree No. 4 begins to stir in the national memory.

Decree 4 was one of the most notorious instruments of Nigeria’s military era. It criminalised publications capable of embarrassing government officials—even when those publications were accurate. Journalists were not prosecuted for falsehood; they were prosecuted for discomforting authority.

The decree created an atmosphere of fear across newsrooms. Editors hesitated. Reporters looked over their shoulders. Investigative journalism retreated under the weight of possible imprisonment.

Nigeria’s return to democracy was supposed to bury that chapter permanently.

The Cybercrime Act was never conceived as a modern reincarnation of Decree 4. Its mission was legitimate and necessary. But laws do not become oppressive only by design. They sometimes drift there through interpretation, enforcement patterns, and the slow normalisation of legal tools used beyond their original target.

That drift is what now worries journalists and media practitioners.

The digital revolution has transformed the practice of journalism. News no longer waits for the printing press. Investigations break online. Commentary spreads instantly across social media. Digital platforms have expanded the reach of public debate and made citizens active participants in governance discourse.

But they have also created new legal vulnerabilities.

When a reporter publishes an investigative story online, when a columnist posts commentary on social media, or when a media organisation exposes misconduct through digital platforms, those activities now occur within the legal environment of cyber legislation.

If criticism posted online can be interpreted as “annoyance” or “offensive communication,” the implications are obvious.

The first casualty is investigative courage.

Editors begin to ask uncomfortable questions before publishing sensitive reports: Will this trigger legal trouble? Could this be interpreted as cyber harassment? Is the story worth the risk?

Once such questions enter newsroom calculations, the chilling effect begins.

Self-censorship quietly replaces editorial boldness. Stories that should be pursued are quietly abandoned. Corruption investigations stall before they begin. The public loses access to information not because it does not exist, but because publishing it becomes legally hazardous.

Democracy weakens not through dramatic repression but through gradual silence.

The Constitution provides a stark counterweight to this trend. Section 39 guarantees the freedom to hold opinions and to receive and impart information without interference. That protection is not decorative. It is foundational. Without a free flow of information, citizens cannot hold institutions accountable.

A democracy cannot function if its journalists must calculate the legal consequences of criticism before publishing the truth.

To be clear, Nigeria must retain strong cybercrime legislation. The country continues to face serious threats from organised digital fraud networks, hacking operations, identity theft rings and cyber-enabled financial crimes. Weakening the legal arsenal against such threats would be reckless.

ADVERTISEMENT

But the fight against cybercrime must never become a pretext for shrinking democratic space.

The real danger lies not in the existence of the Cybercrime Act but in the gradual expansion of its interpretational boundaries. When laws regulating digital crime begin appearing in disputes involving commentary, criticism or investigative reporting, the line between security enforcement and speech regulation becomes dangerously blurred.

That is the moment when democratic vigilance must awaken.

Nigeria’s experience under military rule offers a clear warning. Decree 4 did not silence the press overnight. Its chilling effect spread gradually, until the fear of prosecution reshaped the behaviour of journalists and editors.

History rarely repeats itself in identical form. But it often returns in altered costume.

If Decree 4 represented the repression of the analogue era, Nigeria must ensure that no law becomes its digital successor.

Preventing such drift requires decisive action.

First, the National Assembly must review ambiguous provisions within the Cybercrime Act. Criminal statutes governing communication must be drafted with precision. Elastic language that allows subjective interpretation must be replaced with clear definitions focused strictly on genuine cyber harassment and criminal abuse.

Second, the judiciary must establish firm constitutional boundaries. Courts must distinguish unmistakably between criminal cyber harassment and the legitimate exercise of journalistic and democratic speech.

Third, law enforcement agencies must remain anchored to the law’s original purpose—pursuing cybercriminals, not critics of public authority.

Nigeria’s digital public square has become one of the most vibrant arenas of civic engagement in Africa. Online journalism, social media debate, and digital activism have broadened the democratic conversation beyond traditional institutional walls.

That vibrancy must not be dimmed by legal uncertainty.

Democracy thrives on criticism. It survives on scrutiny. It strengthens when citizens are free to question authority without fear of criminal sanction.

A law designed to protect cyberspace must never become a shadow over the digital republic.

The Cybercrime Act must remain what it was meant to be: a sword against cyber criminals—not a shield against public accountability.

Anything less risks turning a necessary law into a dangerous precedent.

Ogundipe, Public Affairs Analyst, former President Nigeria and Africa Union of Journalists writes from Abuja.