The Nigeria Data Protection Commission (NDPC) has imposed a hefty fine of N766,242,500 on Multichoice Nigeria, the parent company of DStv and GOtv, for violating the Nigeria Data Protection Act.
As Nigeria’s official data protection authority, the NDPC is a public body that processes personal data in line with its legal mandate, relying on lawful bases such as consent, legal obligation, and contractual necessity.
This was revealed in a statement issued on Sunday in Abuja by the Commission’s Head of Legal, Enforcement, and Regulations, Mr. Babatunde Bamigboye.
Bamigboye stated that the penalty followed an investigation initiated in the second quarter of 2024 over alleged breaches of subscribers’ privacy rights and the unlawful international transfer of Nigerians’ personal data.
“NDPC found, among other things, that MultiChoice violated the data privacy rights of its subscribers and individuals associated with them who are not necessarily subscribers.
“The commission also discovered that MultiChoice engaged in the illegal cross-border transfer of personal data belonging to Nigerian data subjects.
“The depth of data processing by Multichoice is patently intrusive, unfair, unnecessary, and disproportionate.
“This is a grave affront to the fundamental right to privacy as enshrined in section 37 of the 1999 Constitution of the Federal Republic of Nigeria,” Bamigboye said.
He stated that Nigeria has the right to safeguard its citizens and uphold data sovereignty under both international and domestic laws, given their significant impact on the rule of law, national security, and economic development.
Bamigboye further explained that during the investigation, following the NDPA’s standard remediation process, the commission instructed MultiChoice to implement suitable corrective actions.
“However, the commission found the measures undertaken by Multichoice in this regard unsatisfactory.
“For want of cooperation, the commission has directed Multichoice to pay N766,242,500 for violating the Nigeria Data Protection Act,” he added.
The NDPC’s National Commissioner, Vincent Olatunji, was also cited as ordering a thorough investigation of all platforms through which MultiChoice gathers personal data of Nigerian citizens for potential non-compliance.
He emphasized that any entity handling personal data in breach of the NDPA is subject to penalties under the law.
As Nigeria’s Data Protection Authority, the NDPC operates as a public institution that processes data in line with its mandate, relying on established lawful grounds such as consent, legal obligation, and contractual necessity.
Discover more from LN247
Subscribe to get the latest posts sent to your email.