The Nigeria Data Protection Commission (NDPC) has imposed a fine of N766,242,500 on Multichoice Nigeria for violating the Nigeria Data Protection Act.
According to a statement released on Sunday and signed by Babatunde Bamigboye, Head of Legal, Enforcement, and Regulations at NDPC, the penalty follows an extensive investigation that began in the second quarter of 2024.
The inquiry was triggered by allegations of privacy violations and unauthorized cross-border transfers of personal data.
Bamigboye explained that the commission’s findings showed that Multichoice not only breached the privacy rights of its subscribers but also of third parties whose personal information was indirectly involved.
“The Commission also found that Multichoice carries out illegal cross-border transfer of personal data relating to data subjects in Nigeria,” the statement read.
Moreover, the NDPC stated that the company’s method of data processing was “intrusive, unfair, unnecessary, and disproportionate.”
“This is a grave affront to fundamental right to privacy as enshrined in section 37 of the 1999 Constitution of the Federal Republic of Nigeria,” Bamigboye added.
Furthermore, the commission stressed the importance of Nigeria’s data sovereignty, both for national security and for promoting trust in digital systems.
“Nigeria is entitled to protect her citizens, and data sovereignty under both international and extant municipal laws – as these have far-reaching implications for rule of law, national security and economic growth,” the statement emphasized.
The NDPC had initially directed Multichoice to implement corrective measures after discovering the violations.
However, the commission found the company’s response inadequate.
“For want of cooperation, the Commission has directed Multichoice to pay N766,242,500 for violating the Nigeria Data Protection Act,” Bamigboye revealed.
In addition to the fine, NDPC National Commissioner, Dr. Vincent Olatunji, has ordered further investigations into all Multichoice outlets where personal data is being collected.
These checks aim to uncover any other potential breaches of data privacy.
“Any outlet that processes personal data in violation of the NDP Act is liable to penalty under the Act,” Bamigboye warned.
Meanwhile, this enforcement action sends a strong message to companies operating in Nigeria that privacy laws must be taken seriously.
