Multichoice Nigeria has been fined ₦766.2 million by the Nigeria Data Protection Commission (NDPC) over violations of the Nigeria Data Protection Act (NDPA), following findings that the company mishandled users’ personal data and conducted unauthorized international data transfers.
The fine comes after a formal investigation was launched by the NDPC in the second quarter of 2024, prompted by public complaints about potential breaches involving the personal information of subscribers and third parties.
According to the NDPC, the probe revealed that Multichoice had engaged in practices that contravened established data protection principles, including the excessive and disproportionate processing of individuals’ personal information. It was also discovered that data belonging to Nigerian citizens had been transferred across national borders without proper legal safeguards in place.
“These actions undermine the privacy rights guaranteed by Section 37 of the 1999 Constitution and breach key provisions of the Nigeria Data Protection Act,” said Babatunde Bamigboye, the Commission’s Head of Legal, Enforcement and Regulations.
The Commission also criticized Multichoice for failing to adequately address its concerns despite being directed to implement remedial measures. Citing insufficient cooperation during the course of the investigation, the NDPC imposed the ₦766,242,500 fine as a corrective measure.
In addition to the financial sanction, the Commission has ordered a full compliance audit of all platforms and channels through which Multichoice collects and processes personal data within Nigeria.
“The Commission will not hesitate to enforce the law where data privacy violations are established. Data protection is a matter of national security, economic stability, and individual rights,” said Dr. Vincent Olatunji, the NDPC National Commissioner.
The NDPC reaffirmed its commitment to upholding data privacy standards and warned that any organization found to be operating outside the bounds of the law will face penalties in accordance with the NDPA.