NDPC slams Multichoice with N766m fine over privacy breaches, illegal data transfers

The Nigeria Data Protection Commission (NDPC) has imposed a fine of N766,242,500 on Multichoice Nigeria, a subsidiary of the South African pay-TV group, for violating the Nigeria Data Protection Act (NDPA).

This follows a year-long investigation launched in the second quarter of 2024, triggered by allegations of unauthorised use and cross-border transfer of Nigerian subscribers’ personal data, the NDPC revealed on Sunday.

In a statement issued by Babatunde Bamigboye, NDPC’s Head of Legal, Enforcement and Regulations, the Commission disclosed that Multichoice was found culpable of several infractions, including the invasive and disproportionate processing of personal data, even affecting individuals who were not registered subscribers.

“The depth of data processing by Multichoice is patently intrusive, unfair, unnecessary and disproportionate. This is a grave affront to the fundamental right to privacy as enshrined in Section 37 of the 1999 Constitution of the Federal Republic of Nigeria,” Bamigboye stated.

READ ALSO: MultiChoice slashes decoder price by 50%, launches free upgrade promo

According to the Commission, Multichoice not only violated the data privacy rights of its subscribers, but also engaged in the unauthorised international transfer of personal data, a breach that carries implications for Nigeria’s data sovereignty, national security, and economic interests.

Despite being directed to implement remedial measures under NDPC’s standard compliance protocol, the Commission noted that Multichoice’s efforts were deemed inadequate. The lack of sufficient cooperation prompted the hefty penalty.

“For want of cooperation, the Commission has directed Multichoice to pay N766,242,500 for violating the Nigeria Data Protection Act,” the NDPC stated.

The NDPC’s National Commissioner, Dr. Vincent Olatunji, has further ordered a comprehensive compliance audit of all Multichoice Nigeria outlets and platforms involved in the collection of citizens’ personal data. He warned that any entity found to be processing personal information in contravention of the NDPA will face similar regulatory action.

This enforcement action marks a significant step in the NDPC’s ongoing commitment to protecting the data rights of Nigerians and ensuring corporate compliance with the national data protection framework.