ASAP

BREAKING

BUSINESS

FEATURED

NDPC fines MultiChoice ₦766m for data protection violations

The Nigeria Data Protection Commission (NDPC) has imposed a fine of N766,242,500 on MultiChoice Nigeria, citing violations of the Nigeria Data Protection Act (NDP Act), including alleged breaches of subscriber privacy and illegal cross-border transfer of personal data.

This was disclosed in a statement issued on Sunday by Babatunde Bamigboye, Head of Legal, Enforcement and Regulations at the Commission. The fine followed an investigation that began in the second quarter of 2024 after concerns were raised about the company’s handling of customer information.

According to the Commission, the probe revealed that MultiChoice processed personal data of not only its subscribers but also their associates without due consent or lawful justification.

“The Commission also found that MultiChoice carries out illegal cross-border transfer of personal data relating to data subjects in Nigeria,” the statement read. “The depth of data processing by MultiChoice is patently intrusive, unfair, unnecessary, and disproportionate.”

The NDPC described the data practices as a violation of Section 37 of the 1999 Constitution, which guarantees the right to privacy, as well as a contravention of data sovereignty obligations under national and international law.

The Commission noted that it had previously issued standard remediation directives to the company, but found MultiChoice’s response inadequate.

“For want of cooperation, the Commission has directed MultiChoice to pay N766,242,500 for violating the Nigeria Data Protection Act,” the statement added.

The NDPC has also ordered a wider compliance audit of all platforms through which MultiChoice collects data from Nigerian citizens, warning that any channel found in violation of the NDP Act will be subject to statutory penalties.

As of the time of filing this report, MultiChoice Nigeria has not issued a public response to the fine or the findings of the Commission.