The federal government through the Nigeria Data Protection Commission (NDPC), has imposed a fine of N766,242,500 on MultiChoice Nigeria for violating the Nigeria Data Protection Act (NDP Act).
NDPC alleged that Multichoice also breached subscriber privacy and illegal cross-border transfer of personal data.
In a statement issued on Sunday by Babatunde Bamigboye, Head of Legal, Enforcement and Regulations of NDPC, the fine was imposed after concerns were raised about the company’s handling of customer information.
The Commission revealed that an investigation was conducted in the second quarter of 2024, after which it was discovered that personal data of subscribers and that of their associates were processed by MultiChoice without due consent or lawful justification.
“The Commission also found that MultiChoice carries out illegal cross-border transfer of personal data relating to data subjects in Nigeria
“The depth of data processing by MultiChoice is patently intrusive, unfair, unnecessary, and disproportionate,” the statement read. The NDPC described such practices as a violation of Section 37 of the 1999 Constitution, which guarantees the right to privacy, as well as a contravention of data sovereignty obligations under national and international law.
The Commission stated that it had previously issued standard remediation directives to the company, but found MultiChoice’s response inadequate.“For want of cooperation, the Commission has directed MultiChoice to pay N766,242,500 for violating the Nigeria Data Protection Act,” the statement added.
The NDPC also ordered a compliance audit of all platforms used by MultiChoice to collect data from Nigerians, warning that any violations of the NDP Act will result in severe penalties. MultiChoice Nigeria is yet to respond publicly to the fine or the Commission’s findings.