by Nigerian News24 Correspondents
The Nigeria Data Protection Commission (NDPC) has imposed a fine of ₦766,242,500 on MultiChoice Nigeria for breaching the Nigeria Data Protection Act (NDPA).
This penalty follows an investigation initiated in the second quarter of 2024, which revealed that MultiChoice violated the privacy rights of its subscribers and improperly transferred the personal data of Nigerian citizens across borders.
In a statement released on Sunday in Abuja, Mr. Babatunde Bamigboye, Head of Legal, Enforcement, and Regulations at the NDPC, confirmed the commission’s findings.
“NDPC found that MultiChoice infringed on the privacy rights of its subscribers and other associated individuals. The company also engaged in unauthorized cross-border transfers of Nigerians’ personal data,” Bamigboye stated.
He further described MultiChoice’s data processing practices as “intrusive, unfair, unnecessary, and disproportionate,” adding that such actions are a serious violation of Nigerians’ constitutional right to privacy, as guaranteed under Section 37 of the 1999 Constitution.
Bamigboye emphasized Nigeria’s right to safeguard the personal data of its citizens in line with both international standards and domestic laws, noting that data protection is critical for upholding the rule of law, ensuring national security, and fostering economic development.
As part of the NDPC’s standard enforcement process, MultiChoice was directed to implement remedial measures. However, the commission deemed the company’s response inadequate.
“Due to a lack of satisfactory cooperation, MultiChoice has been directed to pay a penalty of ₦766,242,500 for violating the Nigeria Data Protection Act,” Bamigboye added.
In addition, NDPC’s National Commissioner, Dr. Vincent Olatunji, ordered a thorough review of all platforms and channels used by MultiChoice to collect personal data from Nigerians, warning that any entity found in breach of the NDPA will face appropriate sanctions.
The NDPC, Nigeria’s statutory data protection authority, processes data in line with its legal mandate, relying on lawful bases such as consent, contractual necessity, and legal obligation.