The Federal Government through the Nigeria Data Protection Commission (NDPC) has imposed a hefty fine of N766 million on MultiChoice Nigeria for multiple violations of the Nigeria Data Protection Act. This unprecedented penalty underscores the growing importance of data privacy in Nigeria and sends a strong message to companies operating in the country: protect your customers’ data or face the consequences.
The NDPC’s investigation, launched in the second quarter of 2024, uncovered several unlawful practices by MultiChoice. The commission found that the pay-TV giant processed personal data of both subscribers and non-subscribers without proper authorization. Additionally, MultiChoice illegally transferred Nigerians’ personal data abroad, bypassing the legal procedures outlined in the Data Protection Act. The NDPC condemned these actions as “patently intrusive, unfair, unnecessary, and disproportionate,” violating the constitutional right to privacy under Section 37 of the 1999 Constitution.
"NDPC's Head of Legal, Enforcement and Regulations, Babatunde Bamigboye, stated on Sunday that the fine resulted from an investigation initiated in Q2 2024. This probe was triggered by allegations of Multichoice's intrusive data handling practices."
This fine is more than a financial slap on the wrist—it’s a bold step toward establishing a precedent for data protection in Nigeria. As the nation embraces digitization, with companies collecting and processing ever-growing amounts of personal information, robust enforcement of data protection laws has never been more critical. The MultiChoice case signals that the NDPC is prepared to crack down on violators, potentially prompting other businesses to bolster their privacy practices.
The NDPC investigation revealed Multichoice illegally processed personal data from both subscribers and non-subscribers, transferring Nigerians' data abroad without following due process, the commission stated.
The NDPC revealed it first ordered Multichoice to implement corrective actions under standard enforcement protocols. However, the company’s response was judged 'unsatisfactory,' prompting the historic fine. Babatunde Bamigboye explicitly linked the penalty to this lack of cooperation, stating: 'For want of cooperation, the commission has directed Multichoice to pay ₦766,242,500 for violating the Nigeria Data Protection Act.
The commission framed this enforcement as a data sovereignty imperative, declaring: 'Nigeria reserves the right to defend its citizens’ data under local and international law.' It emphasized that unchecked violations threaten national security, economic development, and the rule of law.
ADVERT
This isn’t MultiChoice’s first brush with regulatory trouble. In recent years, the company has faced disputes over price increases and tax-related issues, reflecting a pattern of tension with Nigerian authorities.
In February 2025, the Federal Competition and Consumer Protection Commission (FCCPC) ordered a freeze on planned price hikes pending its probe. Ignoring the directive, Multichoice implemented increases on March 1, 2025—an act the FCCPC condemned as a 'deliberate violation.
What’s Next for MultiChoice?
MultiChoice has yet to issue a public response to the fine, leaving open questions about whether it will appeal the decision or take corrective action. Meanwhile, the NDPC has ordered a broader investigation into all of MultiChoice’s data collection outlets, warning that further non-compliance could lead to additional penalties.
Background on the NDP Act
Enacted in 2023, the Nigeria Data Protection Act aims to safeguard the personal data of Nigerian citizens. It sets strict guidelines for how organizations can collect, use, and store personal information, while empowering individuals with greater control over their data. The act also established the NDPC as the regulatory body tasked with ensuring compliance and holding offenders accountable.
Privacy advocates have hailed the NDPC’s decision as a victory for Nigerians’ digital rights. Legal experts suggest that this fine could usher in stricter oversight and compliance requirements for companies in Nigeria, marking a shift in how data protection is enforced across the region.
As Nigeria strengthens its data protection framework, the MultiChoice case stands as a stark reminder that no company is above the law when it comes to safeguarding personal information. With data privacy gaining global prominence, this fine could prove to be a pivotal moment in how companies handle sensitive data in Nigeria.