Multichoice Nigeria has been hit with a N766,242,500 fine by the Nigeria Data Protection Commission (NDPC) for infringing provisions of the Nigeria Data Protection Act.
The South African-owned pay-TV company, which owns Dstv and Gotv, was penalized following a year-long probe by the NDPC into its handling of users’ personal data.
“The investigation which commenced in the second quarter of 2024 was triggered by suspected breach of privacy rights of Multichoice subscribers and illegal cross-border transfer of personal data of Nigerians. NDPC found, among others, that Multichoice violated the data privacy rights of subscribers and their friends who are not necessarily subscribers,” said Babatunde Bamigboye, Head of Legal, Enforcement & Regulations at the NDPC, in a statement released Sunday.
According to the commission, the company was found to be involved in unauthorized cross-border data transfers affecting Nigerian citizens.
It added: “The depth of data processing by Multichoice is patently intrusive, unfair, unnecessary and disproportionate. This is a grave affront to fundamental right to privacy as enshrined in section 37 of the 1999 Constitution of the Federal Republic of Nigeria.“Nigeria is entitled to protect her citizens, and data sovereignty under both international and extant municipal laws – as these have far-reaching implication for rule of law, national security and economic growth.”
In accordance with its compliance process, the NDPC instructed the company to implement necessary corrective actions. However, the commission concluded that Multichoice’s response did not meet expectations.
“For want of cooperation, the Commission has directed Multichoice to pay N766,242,500 for violating the Nigeria Data Protection Act,” the statement read.
The NDPC’s National Commissioner, Dr Vincent Olatunji, has also ordered a full-scale review of all platforms through which Multichoice gathers personal data from Nigerians, warning that any channel found to be operating in violation of the Act will face sanctions.
He emphasized that data controllers or processors that breach the NDP Act risk penalties in line with the law
