Analytical Assessment of the Implementation Effectiveness of the Cybercrime (Prohibition, Prevention) Act 2015 in Nigeria

The Cybercrimes Act 2015 established Nigeria's primary legal framework for prosecuting digital offences, but its implementation effectiveness in securing convictions, deterring cybercrime, and protecting victims has not been subject to systematic analytical assessment. This study analytically assessed the implementation of the Cybercrimes Act 2015 across five dimensions: prosecution outcomes, law enforcement capacity, private sector compliance, victim protection provisions, and judicial capacity. A mixed-methods analytical design was employed, combining secondary analysis of EFCC and NPF cybercrime prosecution data from 2016 to 2023, documentary legal analysis of 80 published cybercrime case decisions, and structured interviews with 20 cybercrime prosecutors, 10 defence counsel, and 8 sitting judges with cybercrime case experience. Prosecution data analysis showed an increase in charged cases from 312 in 2016 to 2,847 in 2023, but conviction rates averaged only 31.2 percent over the period, well below the UNODC 45 percent adequacy benchmark for specialised crime prosecutions. Sentencing inconsistency across 80 analysed cases was substantial (similar offence categories receiving fines of 100,000 to 5,000,000 naira). Private sector critical infrastructure provider compliance with Section 38 mandatory security breach notification was below 15 percent. Judicial technical knowledge deficits in electronic evidence authentication were identified in 60 percent of reviewed cases. The study provides the first comprehensive implementation analysis of the Act and recommends mandatory cybercrime judicial training, mandatory breach notification enforcement, and prosecutorial specialisation.

Keywords: Cybercrime Act, implementation analysis, digital evidence, Nigeria, cybercrime prosecution