Nigeria Data Protection Commission (NDPC) has imposed a substantial fine of N766,242,500 (Seven-Hundred-and-Sixty-Six-Million-Two-Hundred-and-Forty-Two-Thousand-Five-Hundred naira) on Multichoice Nigeria for breaching the provisions of the Nigeria Data Protection Act (NDP Act).
According to a press release signed by the Nigeria Data Protection Commission Head of Legal, Enforcement & Regulations, Babatunde Bamigboye, this decision follows a thorough investigation initiated in the second quarter of 2024, sparked by concerns regarding potential violations of privacy rights affecting Multichoice subscribers and the unauthorized cross-border transfer of personal data belonging to Nigerian citizens.
The NDPC’s findings revealed significant infringements, noting that Multichoice not only encroached upon the data privacy rights of its subscribers but also impacted individuals who are not subscribers.
The NDPC highlighted that Multichoice was engaged in unlawful cross-border transfers of personal data pertaining to data subjects within Nigeria.
The extent of data processing practised by the company was deemed to be excessively intrusive, unfair, unnecessary, and disproportionate, constituting a serious violation of the fundamental right to privacy as guaranteed under Section 37 of the 1999 Constitution of the Federal Republic of Nigeria.
Dr. Vincent Olatunji, National Commissioner of the NDPC, emphasised the importance of protecting citizens’ data rights in accordance with both international standards and existing Nigerian laws. He stated that such violations pose grave risks to the rule of law, national security, and economic stability.
In a bid to rectify these issues, the NDPC had previously instructed Multichoice to implement necessary remedial actions. However, the measures taken by the company were found to be insufficient, leading to the imposition of the fine.
In light of this, the Commission has mandated investigations into all outlets through which Multichoice collects personal data from Nigerian citizens. Any outlet identified to be non-compliant with the NDP Act will be subject to penalties under the law.
This action underscores the NDPC’s commitment to enforcing data protection regulations and preserving the privacy rights of Nigerians.
