Breaking: NDPC Slams Multichoice Nigeria with ₦766 Million Fine Over Data Privacy Breach

The Nigeria Data Protection Commission (NDPC) has imposed a hefty fine of ₦766,242,500 (Seven Hundred and Sixty-Six Million, Two Hundred and Forty-Two Thousand, Five Hundred Naira) on Multichoice Nigeria for violating provisions of the Nigeria Data Protection Act (NDP Act). 

The sanction follows findings from an investigation launched in the second quarter of 2024, which uncovered gross violations of data privacy laws by the company.

According to a press release issued and signed by the Commission's Head of Legal, Enforcement & Regulations, Babatunde Bamigboye (Esq.), said the investigation was triggered by suspected breaches of the privacy rights of Multichoice subscribers, including the illegal cross-border transfer of personal data belonging to Nigerian citizens.

The NDPC noted that Multichoice’s actions extended beyond its subscriber base, affecting individuals who are not necessarily customers of the platform.

"The Commission found that Multichoice’s processing of personal data was intrusive, unnecessary, unfair, and disproportionate. This is a grave violation of the fundamental right to privacy as enshrined in section 37 of the 1999 Constitution of the Federal Republic of Nigeria," the statement emphasized.

NDPC highlighted that Nigeria, in line with both international conventions and domestic law, has a sovereign duty to protect the personal data of its citizens. The breach by Multichoice, therefore, represents not only a legal infraction but also a significant risk to national security, economic stability, and the rule of law.

Despite being directed to take remedial steps, Multichoice was found to have fallen short of the Commission’s expectations. The NDPC described the company’s compliance measures as “unsatisfactory,” and consequently ordered the payment of the ₦766 million fine as a penalty for non-compliance.

In addition, the NDPC National Commissioner, Dr. Vincent Olatunji, has instructed that all Multichoice data-collection outlets in Nigeria be scrutinized for compliance. He warned that any platform found to be processing personal data in violation of the NDP Act would be sanctioned accordingly.

The Commission, in the news release reinforced it's commitment to upholding the integrity of Nigeria’s data protection framework.