Key points
- HEFAMAA registers and accredits every health facility in Lagos State, and no facility may run on premises not registered with it.2
- The NDPC designates organisations processing personal data in the health sector as data controllers of major importance, with registration fees from N10,000.4
- A breach likely to put patients' rights at risk goes to the NDPC within 72 hours, under section 40(2) of the Act as set out in the GAID.5
- Lagos raised N815.86 billion in internally generated revenue in 2023, the highest of any state, per the NBS.6
- wai keeps each Lagos clinic's records in Nigeria, and a person approves every message before it sends.
Summary
A Lagos clinic can use AI for notes and patient replies once it is registered with HEFAMAA and meets the Nigeria Data Protection Act 2023. The NDPC treats health sector organisations as data controllers of major importance that register with it, and with wai a person approves every reply and the doctor signs every note.
Every evening enquiry from Lekki or Ikeja answered before the traffic starts, and every note signed before the doctor drives home. Lagos State's facilities agency counts more than 2,500 health facilities and describes the private sector as a provider of care to over 60% of Lagosians.1
See it in your clinicThirty minutes on your own patients and doctors.
Request a demoSee a Saturday booking request from a Lagos family drafted for your front desk to approve, with a deposit in naira, in fifteen minutes with a clinician who uses wai daily.
| Body or law | Rule | What to ask | How wai meets it |
|---|---|---|---|
| HEFAMAA | Facility registered before it operates, monitored at least twice a year | Is registration and renewal current | Every action logged and exportable for monitoring visits |
| HEFAMAA telemedicine schedule | Telemedicine registered as its own category | Is video care registered | Video consults written up into the same record |
| NDP Act and NDPC guidance notice | Health sector controllers register with the NDPC | Which fee level applies | Records hosted in Nigeria, set up with the clinic |
| GAID, emerging technologies | AI parameters documented, no decision solely by automation | Who decides and who signs | wai drafts, a person approves, the doctor signs |
| NDP Act, section 40(2) | Breach reported to the NDPC within 72 hours | Who notifies, and how fast | Event log ready for the breach review |
The private care market in Lagos
HEFAMAA counts more than 2,500 health care facilities across Lagos State's 57 local government and local council development areas, serving more than 24 million Lagosians by its own figures.1 It describes the private sector as a major provider of care to over 60% of the population.1
Lagos also raises more revenue of its own than any other state. The National Bureau of Statistics recorded N815.86 billion of internally generated revenue for Lagos in 2023, out of N2.43 trillion across the 36 states and the FCT.6
The rules a clinic in Lagos works under
Since the Lagos State Health Sector Reform Law, no one may run a health facility in the state on premises not registered with HEFAMAA.2 The agency, set up in March 2006, sets minimum standards, licenses facilities and checks them with at least two monitoring visits a year, and telemedicine has its own registration schedule.12
Doctors answer to the Medical and Dental Council of Nigeria, whose mission is to regulate the practice of medicine and dentistry.7
Under the Nigeria Data Protection Act 2023, the NDPC designates as of major importance any organisation that keeps a filing system of personal data and works in sectors including health, and such organisations register with the Commission.34 Fees run from N10,000 for primary health centres and independent laboratories to N100,000 for hospitals providing secondary or tertiary care.4
The NDPC's General Application and Implementation Directive asks anyone deploying AI on personal data to document its technical and organisational parameters, to respect the right not to be subject to a decision based solely on automated processing, and to file those parameters with the compliance audit return.5 A breach likely to put patients' rights at risk is reported to the Commission within 72 hours.5
wai hosts each clinic's records in its own country, under that country's rules. We set this up with your clinic. wai is compliant with these rules and built for clinics in Lagos. The clinic can export a log of every message, draft, approval and signature for an NDPC audit.8
The languages Lagos patients write in
The Constitution makes English the language of the National Assembly, with Hausa, Ibo and Yoruba added when arrangements are made, and lets each State House of Assembly work in other languages spoken in the State.9
wai works in any language. A patient can answer intake questions by voice in Yoruba or Igbo, and the doctor reads the answers in English before the visit.10 Each reply is drafted in the patient's language and approved by the team before it sends.
What a demo shows in Lagos
A WhatsApp message arrives at 21:30 from a mother in Surulere asking whether her daughter can see the paediatrician on Saturday morning, early enough to beat the traffic. wai places it in the family's thread, reads the paediatrician's busy times from Google Calendar, Outlook or Apple Calendar, and drafts a reply with the two earliest open times. The front desk approves it the same evening.
The booking link takes a deposit in naira by card through the clinic's own Stripe account, with the clinic as merchant of record, and the family receives a confirmation, a receipt and an intake questionnaire.11 A call missed while the line is busy becomes a drafted text in the same thread.
At the visit wai drafts the note, the paediatrician edits and signs it, and the invoice and the claim for the family's insurer are prepared from the signed note for the team to check.
For health systems, government and insurers in Lagos
Hospital groups, insurers and state programmes such as the Lagos State Health Scheme can commission a system built on wai for one defined pathway, with records hosted in Nigeria and data, configuration and model rights agreed in the contract.1 The approach is on the organisations page.
Where to start
First, confirm the facility's HEFAMAA registration and renewal, and register any telemedicine service under its own schedule.2 Second, register with the NDPC as a data controller of major importance at the right fee level.4
Third, write down where AI enters each workflow and file those parameters with the compliance audit return, as the GAID asks.5 Fourth, count last month's WhatsApp messages and missed calls by hour, then book a Lagos demo and bring that count. After-hours enquiries shows how the evening queue turns into Saturday bookings.
Bring a week of Lagos WhatsApp messages and missed calls, and see the drafts your front desk would approve.
Frequently asked questions
Does a private clinic in Lagos need to register with the NDPC?
Yes. The NDPC's guidance notice designates organisations processing personal data in the health sector as data controllers of major importance, which register with the Commission.4
Who licenses private clinics in Lagos?
HEFAMAA. No one may run a health facility in Lagos State on premises not registered with it.2
Does telemedicine need its own registration in Lagos?
Yes. HEFAMAA lists telemedicine as a separate schedule, with a registration and renewal fee of N150,000.2
Can AI make decisions about patients in Nigeria?
The GAID protects the right not to be subject to a decision based solely on automated processing.5 With wai, the AI drafts and a person at the clinic decides and signs.
Can patients pay a deposit in naira?
Yes. Card payments run through the clinic's own Stripe account, and Stripe lists Nigeria among its supported countries.11
How fast must a data breach be reported?
Within 72 hours of becoming aware of a breach likely to put patients' rights at risk.5
Sources
- 1HEFAMAA, Lagos State Government, 2026Health Facilities Monitoring and Accreditation Agency, home page and overview of healthcare in LagosRead 15 October 2026Read source
- 2HEFAMAA, Lagos State Government, 2026Registration, schedules and renewal feesRead 15 October 2026Read source
- 3Nigeria Data Protection Commission, 2026Nigeria Data Protection Commission, home pageRead 15 October 2026Read source
- 4Nigeria Data Protection Commission, 2024Guidance Notice on the Registration of Data Controllers and Data Processors of Major Importance, NDPC/HQ/GN/VOL.03/B/24Read 15 October 2026Read source
- 5Nigeria Data Protection Commission, 2025Nigeria Data Protection Act 2023, General Application and Implementation Directive (GAID) 2025Read 15 October 2026Read source
- 6National Bureau of Statistics, 2024Internally Generated Revenue at State Level (2023)Read 15 October 2026Read source
- 7Medical and Dental Council of Nigeria, 2026Medical and Dental Council of Nigeria, home pageRead 15 October 2026Read source
- 8wai, 2026Security at waiRead 15 October 2026Read source
- 9Federal Republic of Nigeria, copy on nigeriarights.gov.ng, 1999Constitution of the Federal Republic of Nigeria 1999, sections 55 and 97Read 15 October 2026Read source
- 10wai, 2026wai changelog, intake answered by voice in any languageRead 15 October 2026Read source
- 11Stripe, 2026Stripe global availability, supported countriesRead 15 October 2026Read source
Every Lagos family answered before the traffic starts, every note signed before the drive home.
Fifteen minutes with a clinician who uses wai daily, on your own WhatsApp queue and diary. We reply within one working day.
Partner with us
See it on your own patients, then build it with us
Thirty minutes on your own patients, doctors and rules, in your market. We reply within one working day, and the clinics that partner with us early shape what we build next.
See what wai does between the visits

