NDPC fines MultiChoice Nigeria N766 million for data privacy breaches

The Nigeria Data Protection Commission (NDPC) has fined MultiChoice Nigeria ₦766,242,500 for violating the Nigeria Data Protection Act (NDPA) following an investigation that began in the second quarter of 2024. The investigation revealed that MultiChoice infringed on the privacy rights of its subscribers and individuals associated with them, including those who are not subscribers, and engaged in unlawful cross-border transfer of Nigerians' personal data. The NDPC described MultiChoice's data processing as intrusive, unfair, unnecessary, and disproportionate, calling it a serious violation of the fundamental right to privacy under Nigeria's constitution. Despite the commission directing MultiChoice to implement remedial measures, their efforts were deemed unsatisfactory, leading to the imposition of the fine. The NDPC emphasized Nigeria's right to protect its citizens and data sovereignty under international and municipal laws, highlighting the implications for rule of law, national security, and economic growth. Additionally, the commission has ordered investigations into all outlets collecting personal data on MultiChoice's behalf to ensure compliance with the NDP Act, with penalties for any violations.