Enugu's Safe City Surveillance Runs Without State Law

A Multi-Billion Naira Surveillance Network With No Legal Framework

Enugu State in Nigeria has built one of the country's most extensive urban surveillance systems, and it is running without a dedicated surveillance law to govern it. An investigation by the International Centre for Investigative Reporting (ICIR) found that the state's Safe City project, which includes more than 1,000 CCTV cameras, facial recognition technology, automatic number-plate recognition, and drones, has no statute defining how the data collected is stored, shared, or protected.

The scale of the investment is significant. According to the ICIR findings, Enugu allocated ₦4.657 billion to security technology in 2024 and ₦10 billion in 2025, covering cameras, drones, and facial recognition systems tied to the Safe City initiative launched under Governor Peter Mbah's administration. The project was pitched as a tool to reduce crime and improve public safety across the state. What the investigation exposes, however, is a statutory gap: the surveillance infrastructure is operational, but the legal guardrails that typically accompany this kind of technology are not.

Why a Surveillance Law Matters

Surveillance systems built around facial recognition and license plate tracking are not neutral tools. They generate large volumes of personal data, including biometric identifiers and location patterns, that can reveal where people go, who they meet, and when. Without a specific law governing the Safe City project, there is no publicly defined answer to basic questions that residents and civil society groups would reasonably ask: how long is footage retained, who can access the facial recognition database, what oversight exists to prevent misuse, and what recourse is available if data is mishandled or leaked.

This is not a uniquely Nigerian problem. Jurisdictions around the world have grappled with the tension between rapid deployment of surveillance technology and the slower process of writing rules to constrain it. In the United States, some states have moved to close similar gaps through dedicated legislation. Vermont, for example, passed the Vermont Data Privacy and Online Surveillance Act, which set out specific rules for how personal data and surveillance tools can be used, giving residents clearer protections and giving regulators an actual legal basis to act on violations. The contrast highlights what is missing in Enugu right now: a codified set of rules that surveillance operators are legally required to follow, rather than internal policies that carry no enforceable weight.

Without that legal foundation, the Safe City project operates largely on administrative discretion. That may work fine in the short term, but it leaves residents dependent on the goodwill of whoever runs the system rather than on enforceable rights. It also means there is little clarity on what happens to footage and biometric data if the system is expanded, sold to a private operator, or integrated with other state or federal databases down the line.

What This Means For You

If you live in or visit Enugu, this investigation is a reminder that public surveillance infrastructure and legal accountability do not automatically move at the same pace. The cameras, drones, and facial recognition systems described in the ICIR report are already active and collecting data, even though the rules for that data do not yet exist in law. That gap matters because it affects basic privacy expectations: whether your movements are being logged, how long that information is kept, and whether it could be accessed or shared beyond its original stated purpose.

This situation is not unique to Enugu, and it is a useful case study for anyone thinking about how surveillance technology gets adopted faster than the legal frameworks meant to regulate it. Cities and states elsewhere have faced the same sequencing problem: infrastructure first, oversight later, if at all. Understanding this pattern helps residents anywhere ask sharper questions when new surveillance systems are proposed in their own communities.

Practical Takeaways

For Enugu residents and anyone following this story, a few steps are worth considering. First, stay informed about local government announcements regarding the Safe City project, since public pressure has historically been one of the more effective ways to push for follow-up legislation. Second, support or follow the work of investigative outlets like ICIR that are tracking how state surveillance spending translates into actual oversight. Third, if you are concerned about how facial recognition and location data might be used, look into what protections do exist in your jurisdiction and where the gaps remain, since the absence of a Safe City-specific law does not necessarily mean there is zero applicable data protection framework in the country.

The core issue the ICIR investigation raises is straightforward: technology has outpaced law. Enugu's surveillance law vacuum is a call for state legislators to catch up with the infrastructure already deployed, and for residents to keep asking who is accountable for the data being collected in their name.