The Nigeria Data Protection Commission (NDPC) has levied a substantial fine of N766,242,500 on MultiChoice Nigeria, the parent company for popular satellite television services DStv and GOtv. This significant penalty stems from an investigation initiated in the second quarter of 2024, which concluded that MultiChoice had flagrantly violated the Nigeria Data Protection (NDP) Act, specifically concerning the privacy of its subscribers and their associates.

According to a statement released by Babatunde Bamigboye, NDPC’s Head of Legal, Enforcement, and Regulations, the Commission uncovered several breaches. Key among these findings was that MultiChoice unlawfully processed the personal data of not only its direct subscribers but also their friends, individuals who are not necessarily subscribers themselves. Furthermore, the investigation revealed that MultiChoice was engaged in the illegal cross-border transfer of personal data pertaining to Nigerian data subjects.

The NDPC deemed the extent of data processing undertaken by MultiChoice as "patently intrusive, unfair, unnecessary, and disproportionate." This conduct was explicitly highlighted as a grave affront to the fundamental right to privacy, a right enshrined in Section 37 of the 1999 Constitution of the Federal Republic of Nigeria. The Commission emphasized Nigeria's right to protect its citizens and uphold data sovereignty under both international and extant municipal laws, citing the far-reaching implications for the rule of law, national security, and economic growth.

Prior to imposing the fine, the NDPC had directed MultiChoice to implement appropriate remedial measures. However, the Commission found the company's response and the measures undertaken unsatisfactory, noting a significant "want of cooperation" from MultiChoice. Consequently, the N766.24 million fine was imposed for the demonstrated violations of the Nigeria Data Protection Act.

In light of these findings, Vincent Olatunji, the NDPC’s National Commissioner, has ordered a comprehensive investigation into all outlets through which MultiChoice collects personal data from Nigerian citizens. Olatunji stressed that any outlet found to be processing personal data in violation of the NDP Act would be liable to statutory penalties under the Act. As of the time of this report, MultiChoice Nigeria has not issued a public statement or response regarding the fine or the Commission's findings.