Nigeria’s data protection watchdog has delivered a crushing blow to MultiChoice Nigeria, imposing a staggering N766,242,500 fine on the pay-television operator for what regulators describe as “patently intrusive” violations of citizens’ privacy rights.
The Nigeria Data Protection Commission (NDPC) announced the penalty on Sunday following a comprehensive investigation that began in the second quarter of 2024. The probe was triggered by allegations that the company behind DStv and GOtv services had engaged in unauthorized data processing activities that extended far beyond its subscriber base.
Extensive Privacy Violations Uncovered
The investigation revealed a troubling pattern of data mishandling that shocked regulators. According to Babatunde Bamigboye, Head of Legal, Enforcement, and Regulations at NDPC, Multichoice’s data processing operations were found to be “unfair, unnecessary, and disproportionate,” constituting what he called “a grave affront to the fundamental right to privacy.”
Perhaps most concerning was the discovery that the company had been processing personal data belonging not only to its own subscribers but also to individuals who had never been MultiChoice customers. This unauthorized collection and processing of citizens’ personal information represents a significant overreach that regulators say violates Section 37 of Nigeria’s 1999 Constitution, which guarantees the right to privacy.
The commission also uncovered evidence that Multichoice had been transferring Nigerian citizens’ data across international borders without following proper legal procedures—a practice that raises serious questions about data sovereignty and national security.
Company’s Defiant Response Backfires
The situation deteriorated when Multichoice allegedly failed to cooperate with regulatory authorities. The NDPC had initially directed the company to implement remedial measures as part of standard enforcement procedures, offering an opportunity to address the violations without facing the maximum penalty.
However, regulators deemed the company’s response “unsatisfactory,” leading to the decision to impose a hefty fine. “For want of cooperation, the commission has directed MultiChoice to pay N766,242,500 for violating the Nigerian Data Protection Act,” Bamigboye stated.
The regulatory action signals a broader crackdown on data protection violations. Dr. Vincent Olatunji, National Commissioner of NDPC, has ordered an expanded investigation into all Multichoice data collection outlets nationwide, warning that any facility found processing personal data in violation of the law faces penalties.
Part of Wider Regulatory Storm
This latest sanction adds to MultiChoice’s growing regulatory troubles across multiple sectors. The company is simultaneously battling charges from the Federal Competition and Consumer Protection Commission (FCCPC), which has filed criminal charges against both MultiChoice Nigeria Limited and its Chief Executive Officer, John Ugbe.
The FCCPC action stems from the company’s decision to proceed with price increases on March 1, 2025, despite a direct order from the commission to suspend planned hikes pending an investigation. This defiance led to criminal charges including willful obstruction, impeding an investigation, and providing misleading information to authorities.
The charges represent an unprecedented escalation in regulatory enforcement against one of Nigeria’s most prominent media companies, suggesting that authorities are taking an increasingly hardline stance against corporate non-compliance.
National Security Implications
The NDPC emphasized that the violations extend beyond simple regulatory infractions, carrying implications for national security and economic development. The unauthorized transfer of citizens’ data abroad particularly concerns authorities, who view such practices as challenges to Nigeria’s data sovereignty.
“Nigeria reserves the right to defend its data sovereignty under both local and international law,” the commission stated, signaling that authorities are prepared to take strong action against companies that compromise citizen privacy rights.
This case represents a watershed moment in Nigeria’s enforcement of data protection laws, demonstrating that even major corporations with significant market presence are not immune from regulatory consequences when they violate citizens’ fundamental rights to privacy and data protection.
As regulatory pressure continues to mount, MultiChoice faces the dual challenge of addressing these substantial financial penalties while rebuilding trust with both regulators and the millions of Nigerian subscribers whose personal data was allegedly mishandled.
WHAT YOU SHOULD KNOW
Nigeria’s data protection regulator has fined Multichoice N766 million for serious privacy violations, including unauthorized processing of citizens’ data and illegal cross-border data transfers.
The company’s uncooperative response to regulatory orders worsened the situation, leading to this hefty penalty plus additional criminal charges for defying price increase restrictions.
