On 12 May 2026, the Nigeria Civil Aviation Authority (NCAA) launched a digital Drone/RPAS portal at the DroneTecX 2026 conference in Lagos, putting drone registration, operator certification, incident reporting, ownership transfers, and compliance management onto a single online system at rpas.ncaa.gov.ng. Operators can now upload safety-case files, submit documentation, and track applications in real time, the regulator said, calling the launch "a major milestone" in efforts to "streamline" drone regulation and "accelerate the growth of the drone industry."
The digitisation is genuinely good news. But it is worth being precise about what the portal changes and what it does not. It changes the interface to Nigeria's drone rules. It does not change the rules themselves — and those rules, set out in Part 21 of the Nigeria Civil Aviation Regulations (Nig. CARs), remain among the most restrictive civilian drone frameworks anywhere.
The case for a tight regime
Start with the strongest argument for the NCAA's approach, because it is a real one. Nigeria faces a live, non-hypothetical security environment: insurgency in the northeast, kidnapping-for-ransom across the middle belt, and critical oil and aviation infrastructure that a cheap quadcopter can surveil or threaten. A drone over Murtala Muhammed International Airport is an aviation-safety problem; a drone over a military installation is a national-security one. Regulators who treat unmanned aircraft as a serious airspace-integration challenge — requiring registration, pilot competency, and incident reporting — are doing exactly what the International Civil Aviation Organization asks of them. A digital portal that makes lawful compliance faster and auditable is, on its own terms, a pro-safety and pro-operator reform.
What the portal sits on top of
The problem is the substance underneath the new front end. Under Part 21, any drone heavier than 250 grams must be registered with the NCAA, and commercial operators must complete a Part 21 training course and hold a Remotely Piloted Aircraft System Operator Certificate (ROC), as the authority's own certification-services page confirms. So far, this tracks international norms — the 250-gram threshold is the same line the United States and the EU draw.
Where Nigeria diverges sharply is the security layer. Operators must obtain clearance from the Office of the National Security Adviser (ONSA) before they may fly — folding routine civilian aviation into a national-security vetting process. The penalties are not nominal either: the NCAA has warned of fines, imprisonment, and seizure of equipment for unauthorised operation, and published guidance indicates unregistered operators risk up to three years in prison. A hobbyist photographing a wedding and a commercial mapping firm pass through versions of the same gate.
The proportionality problem
This is where a pro-innovation reading parts company with the regulator. The lawyer Folarinwa Aluko, in a widely circulated analysis, likens the framework to the "Cobra Effect" — a rule that worsens the problem it targets. His point is hard to dismiss: "layered approvals, high-level security vetting, and significant fees" fall almost entirely on compliant users, while anyone who actually intends to weaponise or misuse a drone is, by definition, not going to register it, seek a permit, or submit to ONSA vetting. The regime therefore taxes the law-abiding filmmaker, surveyor, and agritech startup, while the malicious actor it is designed to stop simply opts out.
The cost structure compounds this. Commercial certification in Nigeria runs into hundreds of thousands of naira in processing and certification fees layered on top of the security-clearance process, with permits and annual utilisation charges on top — a financial calculation, as Aluko puts it, rather than a safety check. For a continent where drones are delivering blood in Rwanda, mapping farmland in Kenya, and inspecting cell towers across West Africa, pricing small operators out of legality is an innovation cost, not just an inconvenience.
Digitisation is necessary, not sufficient
A single portal is the right plumbing. The risk is that it launders a disproportionate regime by making it feel modern and efficient. Streamlining the submission of a national-security clearance does not make national-security clearance the right tool for a sub-2-kilogram camera drone flown in daylight, in line of sight, away from airports.
The proportionate path is well-mapped and Nigeria does not have to invent it. A genuine risk-tiered model — the structure the EU adopted in its 2019 "open / specific / certified" categories — would let low-risk recreational and light-commercial flights proceed on simple registration plus a basic online competency test, reserving ONSA vetting and heavyweight certification for genuinely sensitive operations: beyond-visual-line-of-sight, heavy payloads, flights near restricted sites. That would put scarce security-review capacity where the actual threat is, rather than spreading it thinly across every hobbyist.
The NCAA deserves credit for building the portal and for treating drones as a real industry to be regulated rather than banned. The next reform is the one that matters more: matching the weight of the rules to the risk of the flight. Digitising a heavy regime makes it run faster. It does not make it proportionate.