The Nigeria Data Protection Commission (NDPC) has imposed a substantial fine of N766,242,500 on Multichoice Nigeria for the unlawful cross-border transfer of the personal data of Nigerian citizens.
The penalty follows an investigation launched in the second quarter of 2024 into alleged violations of subscribers’ privacy rights. The probe focused on Multichoice’s handling of the personal data of both its customers and individuals associated with them.
According to a statement issued by Babatunde Bamigboye, Head of Legal, Enforcement and Regulations at the NDPC, the Commission concluded that Multichoice unlawfully transferred personal data relating to Nigerian data subjects outside the country.
The Commission described the company’s data handling practices as “patently intrusive, unfair, unnecessary and disproportionate,” asserting that such actions constitute a serious violation of the right to privacy guaranteed under Section 37 of the 1999 Constitution of the Federal Republic of Nigeria.
The NDPC further asserted Nigeria’s sovereign right to protect its citizens’ data under both international conventions and domestic legislation, warning that the consequences of such breaches affect the rule of law, national security, and economic stability.
Although Multichoice was instructed to implement corrective measures, the Commission described the company’s response as “unsatisfactory” and proceeded to levy the N766 million fine for non-compliance.
NDPC National Commissioner, Dr Vincent Olatunji, confirmed that all channels through which Multichoice gathers Nigerians’ personal data will undergo further scrutiny to ensure adherence to the Nigeria Data Protection Act. He warned that any entity found in breach of the Act would be subject to corresponding sanctions.
