NDPC imposes N766m fine on Multichoice for breaching Data Protection Act

Sunday, July 13, 2025 - The Nigeria Data Protection Commission (NDPC) has imposed a fine of N766,242,500 on Multichoice Nigeria for breaching provisions of the Nigeria Data Protection Act (NDP Act), citing unlawful processing and cross-border transfer of citizens’ personal data.

The Nigeria Data Protection Commission (NDPC) has imposed a fine of N766,242,500 on Multichoice Nigeria for breaching provisions of the Nigeria Data Protection Act (NDP Act), citing unlawful processing and cross-border transfer of citizens’ personal data.

The Commission said its investigation, which began in the second quarter of 2024, followed complaints and suspicions around Multichoice’s handling of subscriber data. It revealed that the company not only violated the data rights of its customers but also of non-subscribers whose information was processed without consent.

In a statement signed by Babatunde Bamigboye, Esq., Head of Legal, Enforcement and Regulations, NDPC described Multichoice’s data practices as “intrusive, unfair, unnecessary, and disproportionate,” and a direct affront to the constitutional right to privacy as provided under Section 37 of the 1999 Constitution

“The depth of data processing by Multichoice constitutes a grave violation of the fundamental rights of Nigerians and undermines national data sovereignty,” the statement noted.

The Commission also accused the company of engaging in illegal cross-border transfers of personal data, a move deemed to have serious implications for national security, economic development, and the rule of law.

Although Multichoice was directed to implement remedial measures in line with NDPC’s compliance framework, the Commission said the steps taken by the company were inadequate and unsatisfactory.

“For want of cooperation and failure to meet remediation standards, Multichoice has been directed to pay a penalty of N766,242,500,” the NDPC said.

The National Commissioner, Dr. Vincent Olatunji, has also ordered a sweeping investigation into all Multichoice data collection outlets in Nigeria to determine their level of compliance with the NDP Act.

The Commission warned that any entity processing personal data in breach of the law would face sanctions.

The fine is one of the highest yet issued under Nigeria’s growing data protection framework and signals increased enforcement action against digital platforms operating without regard to data privacy rights.