The Nigeria Data Protection Commission (NDPC) has imposed a fine of ₦766,242,500 on MultiChoice Nigeria for violations of the Nigeria Data Protection Act (NDPA). The NDPC, as Nigeria’s data protection authority, processes data based on lawful grounds, including consent, legal obligation, and contractual agreements. This announcement was made by Mr. Babatunde Bamigboye, the commission’s Head of Legal, Enforcement, and Regulations, in a statement released on Sunday in Abuja.
The fine stems from an investigation initiated in the second quarter of 2024, which uncovered potential infringements of subscribers’ privacy rights and the illegal transfer of personal data belonging to Nigerian citizens across borders.
Bamigboye stated, “The NDPC found that MultiChoice had breached the data privacy rights of its subscribers and individuals connected to them, even if they were not subscribers themselves. Furthermore, the commission identified that MultiChoice had unlawfully transferred personal data of Nigerian data subjects abroad.”
He highlighted that the extent of data processing by MultiChoice is excessively intrusive, unjustified, and disproportionate, representing a serious violation of the fundamental right to privacy as enshrined in Section 37 of the 1999 Constitution of the Federal Republic of Nigeria.
Bamigboye emphasised that Nigeria has the right to safeguard its citizens and uphold data sovereignty in line with both international and local laws, as this has significant implications for the rule of law, national security, and economic development.
During the investigation, in accordance with the NDPA’s standard remediation procedures, the commission directed MultiChoice to implement suitable remedial actions. However, the commission deemed the measures taken by MultiChoice to be inadequate. Consequently, due to lack of cooperation, they mandated the company to pay ₦766,242,500 for breaching the Nigeria Data Protection Act.
Dr. Vincent Olatunji, the NDPC’s National Commissioner, also instructed that all channels through which MultiChoice collects personal data from Nigerian citizens be scrutinised for compliance failures. He warned that any entity processing personal data in violation of the NDPA is subject to penalties under the Act.