The Nigeria Data Protection Commission (NDPC) has fined MultiChoice Nigeria a staggering US$500,364.00 for violating the Nigeria Data Protection Act. This decision follows an investigation initiated in the second quarter of 2024, triggered by allegations surrounding the company’s intrusive data management practices.
In a statement released on Sunday, Babatunde Bamigboye, the Head of Legal, Enforcement, and Regulations at the NDPC, emphasised the serious nature of the violations, stating that MultiChoice’s handling of data infringed on subscribers’ privacy rights and involved the unlawful international transfer of personal information of Nigerian citizens.
The NDPC characterised Multichoice’s data processing as “intrusive, unfair, unnecessary, and disproportionate,” arguing that it constitutes a serious violation of the right to privacy enshrined in Section 37 of the 1999 Constitution of Nigeria.
The investigation revealed various breaches, including unauthorised processing of personal data from both subscribers and non-customers. Additionally, in February 2025, the Federal Competition and Consumer Protection Commission (FCCPC) ordered the pay-TV service provider to halt any planned price increases until the investigation concluded. Despite this directive, Multichoice went ahead with a price hike on March 1, 2025, which the FCCPC described as a blatant disregard for its orders.
Consequently, the FCCPC filed criminal charges against MultiChoice Nigeria Limited and its CEO, John Ugbe, for obstructing an ongoing investigation, violating regulatory mandates, and providing misleading information to the commission. Charges include willful obstruction and impeding the investigation process.
The NDPC discovered that MultiChoice had also been transferring Nigerians’ data abroad without proper procedures. The commission instructed the company to take corrective measures as part of standard enforcement protocols, but it found Multichoice’s response to be lacking, prompting the imposition of a hefty fine.
Bamigboye stated, “Due to the lack of cooperation, the commission has ordered Multichoice to pay US$500,364.00 for breaching the Nigeria Data Protection Act.” Furthermore, Dr. Vincent Olatunji, National Commissioner of the NDPC, has initiated a broader investigation into all Multichoice data collection points nationwide, warning that any outlet engaging in data processing violations will also face penalties.
The NDPC reiterated that Nigeria is committed to protecting its data sovereignty under both domestic and international law, noting that such violations threaten the rule of law, national security, and economic progress. This regulatory action adds to the increasing scrutiny facing MultiChoice Nigeria across various sectors.
