The Nigeria Data Protection Commission (NDPC) dropped a bombshell on Sunday, July 6, fining Multichoice Nigeria a staggering ₦766,242,500 for breaching the Nigeria Data Protection Act (NDP Act). The announcement was detailed in a press release signed by Babatunde Bamigboye, the NDPC’s Head of Legal, Enforcement & Regulations.
The investigation into Multichoice kicked off in the second quarter of 2024, spurred by alarming reports of privacy breaches affecting subscribers.
“The investigation, which commenced in the second quarter of 2024, was triggered by a suspected breach of privacy rights of Multichoice subscribers and illegal cross-border transfer of personal data of Nigerians,” Bamigboye’s statement reveals.
NDPC uncovered that Multichoice violated the NDP Act by engaging in unauthorised data transfers, a move that compromised the personal information of subscribers and their friends who are not necessarily subscribers.
The Commission’s findings paint a troubling picture. “The Commission also found that Multichoice carries out illegal cross-border transfer of personal data relating to data subjects in Nigeria,” the statement notes.
This practice, deemed intrusive and unnecessary, clashes with the rights enshrined in section 37 of the 1999 Constitution, which protects the privacy of Nigerian citizens.
“The depth of data processing by Multichoice is patently intrusive, unfair, unnecessary and disproportionate,” NDPC emphasised, highlighting the gravity of the offence.
Read also: NDPC to explore dialogue with Meta amid exit threat over $255 million data breach row
Beyond the privacy breach, illegal data transfers carry significant implications. “These have far-reaching implications for the rule of law, national security and economic growth,” the Commission warned, stressing the broader impact on Nigeria’s sovereignty and international standing.
The fine reflects the severity of the violation.
NDPC didn’t stop at the penalty. They directed Multichoice to implement remedial measures to address the breach. Yet, the Commission expressed frustration over the company’s response.
“The Commission found the measures undertaken by Multichoice in this regard unsatisfactory,” Bamigboye stated, leading to the hefty fine. NDPC also called for cooperation, but when that fell short, they enforced the penalty.
The fallout extends beyond Multichoice. NDPC National Commissioner, Dr Vincent Olatunji, issued a stern warning to all outlets collecting Nigerian data. “All outlets through which Multichoice is collecting personal data of Nigerian citizens should be investigated for non-compliance,” he declared.
“Any outlet that processes personal data in violation of the NDP Act is liable to penalty under the Act,” Olatunji added.
This move comes amid growing concerns over data security in Nigeria.
Technext Newsletter
Get the best of Africa’s daily tech to your inbox – first thing every morning.
Join the community now!
