NDPC imposes ₦766 million MultiChoice Nigeria data violation fine for illegal data processing and cross-border transfers, in breach of the NDPA

A record-breaking MultiChoice Nigeria data violation fine of ₦766,242,500 has been imposed by the Nigeria Data Protection Commission (NDPC) following extensive investigations into the company’s handling of personal data.

Also read: FG fixes October 7 for arraignment of Multichoice executives

The penalty, announced over the weekend, marks the highest enforcement action taken since the enactment of the Nigeria Data Protection Act (NDPA) in 2023.

According to the NDPC, MultiChoice Nigeria engaged in unauthorised processing of personal data and illegal cross-border transfers involving the data of Nigerian citizens and their associates.

The investigation, which commenced in Q2 2024 after multiple complaints, revealed systemic violations of subscribers’ privacy rights.

The NDPC noted that MultiChoice processed data without obtaining proper consent or providing lawful justification.

Speaking on the breach, Babatunde Bamigboye, Head of Legal, Enforcement and Regulations at NDPC, described the company’s actions as “patently intrusive, unfair, unnecessary, and disproportionate.”

He added that such behaviour was “a grave affront to the constitutional right to privacy guaranteed under Section 37 of the 1999 Constitution.”

He stressed the importance of data sovereignty under national and international law, highlighting its implications for economic stability, national security, and the rule of law.

Despite being directed earlier to adopt remedial measures, MultiChoice’s compliance was deemed inadequate by the NDPC.

As a result, the commission exercised its statutory powers to impose the maximum fine allowed under the NDPA.

In addition to the MultiChoice Nigeria data violation fine, the NDPC has ordered a full compliance audit across all MultiChoice platforms that collect personal data from Nigerian users.

Dr Vincent Olatunji, the NDPC’s National Commissioner, warned that any future breaches would attract further sanctions.

“This enforcement action is a clear message that data rights are not optional and must be respected by all organisations operating within Nigeria’s digital space,” Dr Olatunji stated.