NDPC Slams ₦766 Million Fine on MultiChoice for Egregious Data Privacy Violations

The Nigeria Data Protection Commission (NDPC) has imposed a hefty fine of ₦766,242,500 (Seven Hundred and Sixty-Six Million, Two Hundred and Forty-Two Thousand, Five Hundred Naira) on MultiChoice Nigeria, the operator of DStv and GOtv, for multiple breaches of the Nigeria Data Protection Act (NDP Act). This significant penalty, announced on Sunday, July 6, 2025, marks the largest single fine issued by the NDPC since the Act came into force in 2023.

According to a statement released by Babatunde Bamigboye, the NDPC’s Head of Legal, Enforcement, and Regulations, the punitive measure follows a year-long investigation that commenced in the second quarter of 2024. The probe was triggered by suspected violations of privacy rights involving MultiChoice subscribers and the illicit cross-border transfer of Nigerians’ personal data.

The Commission’s findings revealed that MultiChoice not only violated the data privacy rights of its subscribers but also those of individuals associated with them who are not direct subscribers. Furthermore, it was discovered that the pay-television provider engaged in the unauthorized transfer of Nigerian citizens’ personal data across international borders, a clear contravention of the NDP Act.

Bamigboye stated, “The depth of data processing by MultiChoice is patently intrusive, unfair, unnecessary, and disproportionate. This is a grave affront to the fundamental right to privacy as enshrined in Section 37 of the 1999 Constitution of the Federal Republic of Nigeria.” He emphasized Nigeria’s right to protect its citizens and data sovereignty, highlighting the far-reaching implications of such breaches for the rule of law, national security, and economic growth.

The NDPC had, in line with its standard remediation procedures, directed MultiChoice to implement appropriate corrective measures during the course of the investigation. However, the Commission found the steps taken by MultiChoice to be “unsatisfactory,” leading to the imposition of the substantial fine “for want of cooperation.”

Dr. Vincent Olatunji, the National Commissioner of the NDPC, has further ordered a comprehensive investigation into all channels through which MultiChoice collects the personal data of Nigerian citizens to ensure full compliance with the NDP Act. He warned that any outlet found to be processing personal data in violation of the Act would also face penalties. This robust enforcement action signals the NDPC’s firm resolve to hold data controllers accountable and safeguard the privacy of Nigerian citizens.