The Nigeria Data Protection Commission (NDPC) has announced a significant fine of N766,242,500 (Seven-Hundred-and-Sixty-Six-Million-Two-Hundred-and-Forty-Two-Thousand-Five-Hundred naira) against Multichoice Nigeria for violating the Nigeria Data Protection Act (NDP Act).
The investigation, which began in the second quarter of 2024, was initiated following suspected breaches of privacy rights concerning Multichoice subscribers and the illegal cross-border transfer of Nigerian citizens’ personal data. The NDPC found that Multichoice violated the data privacy rights of its subscribers and their non-subscribing friends.
In a statement by NDPC’s Head of Legal, Enforcement & Regulations, Babatunde Bamigboye Esq, he dislcosed that the Commission determined that Multichoice engaged in the illegal cross-border transfer of personal data relating to data subjects in Nigeria.
The NDPC described Multichoice’s data processing practices as “patently intrusive, unfair, unnecessary and disproportionate,” deeming it a grave affront to fundamental privacy rights enshrined in Section 37 of the 1999 Constitution of the Federal Republic of Nigeria.
The NDPC emphasized Nigeria’s right to protect its citizens and data sovereignty under both international and municipal laws, highlighting the far-reaching implications for the rule of law, national security, and economic growth.
While Multichoice was directed to undertake remedial measures, the Commission found the measures implemented by the company to be “unsatisfactory.” As a result, the NDPC directed Multichoice to pay the N766,242,500 fine for its violations.
Dr. Vincent Olatunji, NDPC National Commissioner, stated that all outlets through which Multichoice collects personal data of Nigerian citizens will be investigated for non-compliance. He added that any outlet found to be processing personal data in violation of the NDP Act is liable to penalties under the Act.
