CBN Misinterprets Cybercrime Act, Individual Not Obligated to Pay Cybersecurity Levy — Falana Reveals

Human rights lawyer Femi Falana, SAN, clarified that the Central Bank of Nigeria misinterpreted the provisions of Cybercrime (Prohibition, Prevention, etc.) Amendment Act 2024 regarding the 0.05% levy, stating that individual customers are not legally obligated to pay this levy.

In a press release obtained by SaharaReporters on Thursday, Falana emphasized that the Cybercrime Act 2024 as amended specifies the businesses responsible for paying the levy.

These include: GSM service providers and all telecommunications companies, Internet service providers, Banks and other financial institutions, Insurance companies, The Nigerian Stock Exchange

Falana’s statement aims to correct any misunderstandings regarding the application of the Cybercrime Act and the financial obligations related to the levy.

The renowned lawyer said, “Pursuant to the Cybercrime (Prohibition, Prevention etc) Act 2015 amended in 2024, a levy amounting to 0.5 per cent of the value of all electronic transactions shall be collected and remitted to the National Cybersecurity Fund overseen by the Office of the National Security Adviser.

“Even though the said levy of 00.0 5 per cent is payable by the businesses listed in the second schedule to the principal Act, the Central Bank of Nigeria has wrongly directed all financial institutions  to apply the levy at the point of electronic transfer origination and that the amount is to be explicitly noted in customer accounts under the description  “Cybersecurity Levy” and remitted by the financial institution. 

READ ALSO: Northern Elites Unhappy with Tinubu’s Administration Over ‘Misfit Appointees and Anti-People Policies’- Borno Elders Forum Dean

“The circular issued by the Central Bank has given the very erroneous impression that the levy is payable by individual customers.

“The erroneous interpretation might have arisen from the substitution of  “businesses” for “business” in the amendment.  For the avoidance of doubt, by virtue of section 42(a) of the Cybercrime Act 2025 as amended, the businesses which are required to pay the levy are:

a. GSM Service providers and all telecommunications companies;

b. Internet Service Providers;

c. Banks and other Financial Institutions;

d. Insurance Companies;

e. Nigerian Stock Exchange.

“In view of the foregoing, the Central Bank of Nigeria should be directed to withdraw its Circular of  6th of May, 2024 forthwith as it has wrongly interpreted the provisions of  the Cybercrime (Prohibition, Prevention, etc.) Amendment Act 2024. The CBN should also apologise to Nigerians for the misleading interpretation of the clear and unambiguous provisions of the Cybercrime (Prohibition, Prevention, etc.) Amendment Act 2024.”