Investigation Reveals “Intrusive” Data Processing
According to NDPC’s Head of Legal, Enforcement and Regulations, Babatunde Bamigboye, the probe began in the second quarter of 2024 after reports emerged accusing Multichoice of intrusive data collection.
“The depth of data processing by Multichoice is patently intrusive, unfair, unnecessary and disproportionate,” Bamigboye said in a statement on Sunday.
The commission found that the pay-TV operator not only processed personal data of its own subscribers without sufficient legal basis but also handled information belonging to non-customers.
Cross-Border Data Transfers Without Due Process
One of the key violations involved the unauthorised transfer of Nigerians’ personal data abroad. NDPC said that Multichoice failed to follow due process for cross-border data transfers, a requirement under the Nigeria Data Protection Act designed to protect national data sovereignty.
“These actions represent a grave affront to the fundamental right to privacy as enshrined in section 37 of the 1999 Constitution of the Federal Republic of Nigeria,” the NDPC noted.
Company’s Response Deemed Unsatisfactory
As part of its standard enforcement approach, NDPC directed Multichoice to take corrective measures. However, the regulator described the company’s response as inadequate.
“For want of cooperation, the commission has directed Multichoice to pay ₦766,242,500 for violating the Nigeria Data Protection Act,” Bamigboye announced.
National Commissioner of the NDPC, Dr Vincent Olatunji, also ordered an expanded investigation covering all Multichoice data collection outlets nationwide, warning that any outlet violating the Act could face penalties.
Broader Implications for Data Sovereignty and National Security
NDPC emphasized that Nigeria has a duty to protect its data sovereignty under both local and international law, adding that such violations can undermine the rule of law, national security, and economic development.
“The era of treating Nigerians’ personal data carelessly is over,” one senior official told reporters on condition of anonymity.
Regulatory Scrutiny on Multiple Fronts
This data privacy sanction is the latest in a series of regulatory challenges facing Multichoice Nigeria.
In February 2025, the Federal Competition and Consumer Protection Commission (FCCPC) ordered the company to halt planned price increases pending the outcome of its own investigation. Nevertheless, Multichoice went ahead with the hikes on March 1—a move the FCCPC described as a deliberate breach of its directive.
Subsequently, criminal charges were filed against Multichoice Nigeria Limited and its Chief Executive Officer, John Ugbe. The charges include willful obstruction, impeding an investigation, and providing misleading information to the FCCPC.
Sign of Tougher Enforcement in Nigeria
Analysts say these developments reflect a new, stricter regulatory climate in Nigeria. Authorities are increasingly signalling that companies—especially those handling sensitive data—must comply fully with national laws or face significant penalties.
Observers note that the outcome of Multichoice’s appeal, if filed, could help shape the future of data protection enforcement in Nigeria’s fast-growing digital economy.