The Nigeria Data Protection Commission (NDPC) has slammed a hefty fine of ₦766,242,500 on Multichoice Nigeria for breaching key provisions of the Nigeria Data Protection Act (NDPA).
The penalty was announced on Sunday following a year-long investigation into suspected privacy violations and unauthorized international data transfers involving Nigerian subscribers of the South African-owned pay-TV giant.
The probe, which began in Q2 2024, uncovered what NDPC described as “systemic and intrusive” data practices by Multichoice. According to Babatunde Bamigboye, Head of Legal, Enforcement & Regulations at NDPC, the company was found to have violated the privacy rights of both subscribers and non-subscribers whose data were allegedly collected without adequate consent.
“The depth of data processing by Multichoice is patently intrusive, unfair, unnecessary, and disproportionate,” Bamigboye said in an official statement. “This is a grave affront to the fundamental right to privacy as enshrined in Section 37 of the 1999 Constitution of the Federal Republic of Nigeria.”
The investigation further revealed that Multichoice engaged in unauthorized cross-border data transfers, a serious breach of the NDPA which mandates prior approval and protective safeguards for international data handling.
While Multichoice reportedly undertook some remedial steps during the investigation, the Commission described those efforts as “unsatisfactory and lacking transparency.” As a result, the NDPC invoked its powers under the NDPA to impose a compliance fine and mandate further corrective action.
“In view of the want of cooperation, the Commission has directed Multichoice to pay ₦766,242,500 for violating the Nigeria Data Protection Act,” the statement read.
NDPC National Commissioner, Dr. Vincent Olatunji, has also ordered a wider audit of all data collection platforms operated by Multichoice in Nigeria. These include DStv, GOtv, and online portals collecting personal information for subscriptions, billing, and customer service.
“All Multichoice data outlets will be scrutinized for compliance. Any unit or process found in breach will be penalized according to the law,” Dr. Olatunji stated.
The Commission emphasized that the enforcement action serves to uphold Nigeria’s data sovereignty and safeguard citizens against exploitative corporate practices.
“Nigeria is entitled to protect her citizens under both international and municipal laws. These violations have far-reaching implications for national security, digital trust, and economic growth,” Bamigboye stressed.
The NDPC reiterated that privacy rights are fundamental and non-negotiable, especially in a digital age where vast amounts of personal data are processed for commercial gain.
As of the time of this report, Multichoice Nigeria has not issued an official response to the fine or the NDPC’s findings.
The penalty marks one of the most significant enforcement actions since the NDPA was enacted in 2023, underscoring the government’s resolve to ensure robust digital governance and corporate accountability in Nigeria’s data ecosystem.
Industry observers say the development could trigger a wave of internal audits across the country’s telecom, tech, and media sectors, as companies scramble to assess their data compliance status and avoid similar penalties.
