The Nigeria Data Protection Commission (NDPC) has imposed a fine of ₦766,242,500 on Multichoice Nigeria, an entertainment platform that provides access to cable television services, for reported violations of the Nigeria Data Protection (NDP) Act, following an extensive investigation into the company’s data handling practices.
Launched in the second quarter of 2024, the probe was initiated after reports of possible privacy breaches involving the personal data of Multichoice subscribers, and, notably, their associates who are not registered users. The NDPC said it found that Multichoice not only infringed on the privacy rights of these individuals but also engaged in the unauthorised cross-border transfer of Nigerians’ data.
According to the Commission, Multichoice’s data processing activities were deemed intrusive, disproportionate, and unnecessary, amounting to a clear violation of Section 37 of the 1999 Constitution, which guarantees the right to privacy.
The NDPC stressed that safeguarding citizens’ data and asserting data sovereignty is a national priority, with implications for the rule of law, national security, and economic growth. While Multichoice was given the opportunity to implement corrective measures in line with standard regulatory procedures, the Commission found its response inadequate.
As a result, the NDPC has ordered the company to pay the ₦766.2 million fine and announced further enforcement actions. Also, NDPC’s National Commissioner, Dr Vincent Olatunji, has directed that all Multichoice data collection channels in Nigeria be investigated for compliance with the NDP Act. He warned that any outlet found processing data in violation of the Act would face appropriate penalties.
