The Nigeria Data Protection Commission (NDPC) has imposed a fine of ₦766,242,500 on MultiChoice Nigeria for violating provisions of the Nigeria Data Protection Act (NDPA).
In a statement released on Sunday in Abuja, the NDPC’s Head of Legal, Enforcement and Regulations, Mr. Babatunde Bamigboye, revealed that the penalty followed an investigation launched in the second quarter of 2024. The probe uncovered alleged breaches of subscribers’ privacy rights and the unlawful cross-border transfer of Nigerians’ personal data.
“NDPC found, among other things, that MultiChoice violated the data privacy rights of its subscribers and individuals associated with them who may not necessarily be subscribers,” Bamigboye stated.
He explained that the company’s data processing practices were found to be intrusive, unfair, unnecessary, and disproportionate — actions deemed a serious infringement of the constitutional right to privacy under Section 37 of the 1999 Constitution.
The commission also found that MultiChoice had transferred personal data of Nigerian citizens outside the country without lawful basis, a clear breach of data sovereignty protections under both domestic and international law.
These violations, according to Bamigboye, have significant implications for national security, economic development, and the rule of law.
During the course of the investigation, MultiChoice was directed to implement corrective measures. However, the commission deemed the company’s efforts insufficient and lacking in cooperation.
As a result, the NDPC ordered MultiChoice to pay the ₦766 million fine for its non-compliance.
In addition, the NDPC’s National Commissioner, Dr. Vincent Olatunji, has ordered a comprehensive review of all platforms used by MultiChoice to collect the personal data of Nigerian citizens to ensure compliance with the NDPA.
He reiterated that any channel found to be processing personal data unlawfully will face sanctions as stipulated under the Act.
Read Also: https://fusionchronicles.ng/police-rescue-19-ghanaians-from-human-traffickers-in-oyo/
The NDPC, as Nigeria’s statutory data protection authority, processes data within the bounds of consent, legal obligation, and contract — the lawful bases recognised under the NDPA.
