By Omoruyi ‘Uyilaw’ Edoigiawerie, Esq
The AI debate is currently focused on chatbots and content generation. That conversation is already outdated. The next wave of artificial intelligence will not simply assist workers; it will increasingly perform executive, operational, compliance, procurement, customer service, and decision-making functions traditionally reserved for human beings. This shift will challenge fundamental assumptions embedded in corporate, contract, consumer protection, employment, data protection, and regulatory enforcement law.
The question is no longer whether AI can think. The question is whether our legal systems can govern organisations in which machines increasingly make decisions.
When the internet first emerged, the legal challenge was largely about digitising existing relationships. Contracts became electronic. Communications moved online. Commerce became borderless. Yet beneath these changes, a fundamental assumption remained intact: human beings continued to make decisions.
Artificial intelligence agents are different.
Unlike traditional software, AI agents are designed not merely to execute instructions but to pursue objectives. They can negotiate, analyse, prioritise, recommend, communicate, and increasingly act with a degree of autonomy that separates them from previous generations of technology. The implications of this development are profound and, in many respects, poorly understood.
For most businesses today, AI remains an efficiency tool. It drafts emails, summarises meetings, generates reports, and assists with research.
However, the frontier has already shifted. Around the world, businesses are deploying AI agents to onboard customers, process claims, approve loans, manage procurement systems, monitor regulatory compliance, optimise supply chains, screen job applicants, and resolve consumer complaints.
The significance of this transition cannot be overstated. The issue is not that machines are becoming more intelligent. The issue is that machines are beginning to exercise decision-making authority with legal consequences.
Historically, legal systems have been designed around identifiable actors. Corporate law assumes directors make decisions. Employment law assumes managers exercise oversight. Consumer protection frameworks assume businesses can explain why a particular decision was made. Administrative law assumes accountability can be traced to a responsible individual or institution.
However, Artificial Intelligence agents now complicate these assumptions. Consider a Nigerian bank deploying an AI-powered credit approval system.
The AI agent reviews customer records, assesses transaction histories, analyses alternative credit indicators, applies risk parameters, and approves or rejects loan applications. Thousands of decisions are made daily without direct human review.
Now imagine regulators receive complaints alleging discriminatory lending outcomes. The bank’s management insists no human being made the decisions. The software developer argues it merely supplied the technology. The data provider claims responsibility ends with data accuracy.
Who then bears legal responsibility? This question is no longer hypothetical.
In 2023, American regulators intensified scrutiny of algorithmic decision-making in lending and employment. Across Europe, concerns about automated decision-making were among the driving forces behind the EU AI Act, widely regarded as the world’s most comprehensive attempt to regulate artificial intelligence.
China has introduced algorithmic governance rules that require transparency and regulatory oversight for certain automated systems. In the United Kingdom, regulators are actively examining the accountability implications of AI deployment across critical sectors. The global direction of travel is becoming increasingly clear.
The focus of regulation is shifting from artificial intelligence generally to autonomous decision-making specifically.
Nigeria is not insulated from these developments. Indeed, the Nigerian context may make the challenge even more urgent. The country’s rapid digital transformation has often outpaced regulatory adaptation.
Fintech, digital lending, e-commerce, mobility technology, digital banking, and blockchain innovation all expanded faster than regulatory frameworks initially anticipated. Artificial intelligence is likely to follow a similar trajectory.
Yet AI agents present a different category of risk. A flawed employee may affect dozens of customers. A flawed AI agent may affect millions.
Scale changes everything.
This becomes particularly relevant when viewed through the lens of Nigeria’s Data Protection Act. AI agents are fundamentally dependent on data. The effectiveness of autonomous systems often increases in direct proportion to the quantity and quality of information they can access.
Consequently, organisations deploying AI agents will face growing scrutiny regarding lawful processing, transparency obligations, automated profiling, data minimisation, and accountability requirements.
However, privacy may ultimately prove to be the least complicated legal issue. The more difficult challenge concerns explainability.
Many advanced AI systems operate as black boxes. They generate outcomes that are statistically effective but difficult to interpret. This creates a direct tension with legal systems, which traditionally require reasons, justification, and accountability.
A customer denied a loan wants to know why. An employee rejected during recruitment wants an explanation. A regulator investigating discrimination seeks evidence. A court determining liability requires accountability.
Yet increasingly sophisticated AI systems may be incapable of providing explanations that satisfy legal expectations.
This is where the conversation moves beyond technology and enters the realm of governance. The law has always been concerned with power. Who exercises it. Under what authority. Subject to what constraints. And with what consequences.
AI agents represent the emergence of a new form of power within organisations.
Not legal power. Not political power. Algorithmic power.
This power can influence economic opportunities, determine access to services, allocate resources, shape consumer choices, and affect individual rights.
The challenge is that it does so without possessing legal personality or legal responsibility. For Nigerian policymakers, this presents an extraordinary opportunity.
History rarely gives nations the luxury of regulatory hindsight. In the case of artificial intelligence, Nigeria possesses precisely that advantage.
While many advanced economies are struggling to retrofit twentieth-century legal doctrines to twenty-first-century technologies, Nigeria can observe these developments in real time and design governance frameworks informed by global experience rather than regulatory crisis. The opportunity is not simply to catch up with the world, but to avoid some of the mistakes the world is already making.
The country does not necessarily require an AI Act immediately. What it requires is a clear governance framework addressing accountability for autonomous decision-making systems. The central principle should be simple: autonomy must never eliminate accountability.
No matter how sophisticated AI agents become, responsibility must remain traceable to identifiable legal persons.
Organisations cannot be permitted to avoid liability simply because a machine made a decision. Equally, regulators must avoid frameworks that unnecessarily stifle innovation and investment. The objective should be responsible deployment rather than regulatory paralysis.
Business leaders should also recognise that this issue is no longer confined to technology departments. AI governance is rapidly becoming a boardroom issue. Directors who ignore the legal implications of autonomous systems may soon find themselves confronting questions from regulators, investors, auditors, and courts.
The most successful organisations of the next decade will not merely be those that deploy Artificial Intelligence. They will be those who deploy it responsibly and transparently, within a governance structure capable of maintaining public trust.
The broader lesson is that the AI conversation is evolving. For the past three years, public attention has focused on whether artificial intelligence can generate content, write code, or answer questions. Those capabilities are impressive but ultimately secondary.
The more consequential development is that artificial intelligence is beginning to make decisions. And throughout history, whenever a new entity acquires the ability to make decisions at scale, the law eventually follows.
The only uncertainty is whether lawmakers, regulators, businesses, and legal practitioners will move quickly enough to shape the future, or whether they will once again find themselves reacting to it.
*Omoruyi ‘Uyilaw’ Edoigiawerie is a leading start-up lawyer and policy advisor. He is the Founder and Chief Servant at EandC Legal. To get in touch, please email: hello@uyilaw.com
