The Nigeria Data Protection Commission (NDPC) has imposed a fine of ₦766,242,500 on Multichoice Nigeria for allegedly violating the Nigeria Data Protection Act (NDP Act) through invasive data practices and unlawful cross-border transfers of personal information.
The penalty follows an investigation launched in the second quarter of 2024 after complaints surfaced about breaches of subscribers’ privacy rights and concerns over how Multichoice handled data belonging to individuals who were not even direct customers.
In a statement by the NDPC’s Head of Legal, Enforcement and Regulations, Babatunde Bamigboye, described Multichoice’s data practices as intrusive and disproportionate.
“The depth of data processing by Multichoice is patently intrusive, unfair, unnecessary and disproportionate,” Bamigboye said.
The NDPC further accused Multichoice of engaging in illegal cross-border data transfers, contravening national laws meant to protect Nigerians’ personal information.
The Commission revealed that Multichoice’s response to earlier directives to implement corrective measures was found unsatisfactory, leading to the hefty sanction.
“For want of cooperation, the Commission has directed Multichoice to pay ₦766,242,500 for violating the Nigeria Data Protection Act,” he said.
Highlighting the broader stakes, the NDPC emphasised the importance of data sovereignty, warning that violations have significant implications for national security, economic stability, and the rule of law.
