By Peter Omopo
Abuja, July 6, 2025 — The Nigeria Data Protection Commission (NDPC) has slammed a ₦766,242,500 fine on MultiChoice Nigeria for multiple violations of the Nigeria Data Protection Act, including unlawful cross-border transfer and invasive processing of personal data.
The sanction follows a comprehensive investigation launched in the second quarter of 2024 into complaints concerning breaches of subscribers’ privacy rights.
In a statement issued on Sunday in Abuja, the Commission’s Head of Legal, Enforcement and Regulations, Mr. Babatunde Bamigboye, revealed that the pay-TV giant was found guilty of processing data in a manner deemed “intrusive, unfair, unnecessary, and disproportionate.”
“MultiChoice violated the privacy rights of its subscribers and also of individuals linked to those subscribers who may not have directly signed up for services,” Bamigboye said.
He added that the company engaged in the unauthorised cross-border transfer of data belonging to Nigerian citizens—an act that contravenes national data protection laws.
The NDPC, which serves as Nigeria’s regulatory authority on data privacy and security, reiterated that all data processing activities must adhere to recognised legal bases such as user consent, contractual necessity, or statutory obligations.
Describing MultiChoice’s actions as a “grave affront” to citizens’ constitutional rights, the Commission cited Section 37 of the 1999 Constitution, which guarantees the right to privacy.
The fine is one of the largest penalties imposed since the enactment of the Nigeria Data Protection Act and signals a strong stance by the NDPC in enforcing compliance across industries handling sensitive user data.
