Multichoice Nigeria fined over N766m for violating NDP Act

The Nigeria Data Protection Commission, NDPC, has imposed a fine of N766,242,500 (seven hundred and sixty-six million, two hundred and forty-two thousand, five hundred naira) on Multichoice Nigeria for breaching the Nigeria Data Protection, NDP Act.

In a statement released on Sunday and signed by Babatunde Bamigboye, Head, Legal, Enforcement and Regulations, NDPC stated that the investigation, initiated in the second quarter of 2024, was prompted by suspected breaches of privacy rights of Multichoice subscribers, as well as the unlawful cross-border transfer of Nigerians’ personal data.

According to Bamigboye, NDPC found that Multichoice had violated the data privacy rights not only of its subscribers but also of individuals associated with them, who are not necessarily subscribers themselves.

“The Commission also found that Multichoice carries out illegal cross-border transfer of personal data relating to data subjects in Nigeria.

“The depth of data processing by Multichoice is patently intrusive, unfair, unnecessary and disproportionate.

“This is a grave affront to fundamental right to privacy as enshrined in section 37 of the 1999 Constitution of the Federal Republic of Nigeria.

“Nigeria is entitled to protect her citizens, and data sovereignty under both international and extant municipal laws – as these have far-reaching implications for rule of law, national security and economic growth.

“In line with its standard remediation procedure, the Commission directed Multichoice to carry out appropriate remedial measures.

“However, the Commission found the measures undertaken by Multichoice in this regard unsatisfactory.

“For want of cooperation, the Commission has directed Multichoice to pay N766,242,500 for violating the Nigeria Data Protection Act.

“In view of the foregoing, NDPC National Commissioner, Dr Vincent Olatunji, has directed that all outlets through which Multichoice is collecting personal data of Nigerian citizens should be investigated for non-compliance.

“Any outlet that processes personal data in violation of the NDP Act is liable to penalty under the Act,” Bamigboye said.