Nigeria’s Data Protection Commission (NDPC) has fined Multichoice Nigeria Limited ₦766 million (approximately $501,340) for breaching the Nigeria Data Protection Act (NDPA), following an extensive investigation into the company’s handling of customer data.
Multichoice, the parent company behind popular pay-TV platforms DStv and GOtv, was accused of engaging in unlawful data processing, including the unauthorized transfer of personal data across borders and the use of customer information in ways described as “intrusive, unfair, and disproportionate.”
Why Multichoice Was Fined
According to Babatunde Bamigboye, Head of Legal, Enforcement, and Regulations at the NDPC, the fine stems from:
- Suspected violations of subscribers’ privacy rights
- Illegal cross-border data transfers without proper safeguards
- Failure to implement adequate remedial actions, despite being directed to do so
“The depth of data processing by MultiChoice is patently intrusive, unfair, unnecessary, and disproportionate—affecting not only subscribers but also their associates,” said Bamigboye in an official statement.
Background: Growing Scrutiny of Multichoice in Nigeria
This penalty adds to a series of regulatory challenges Multichoice has faced in Nigeria over the last two years, including:
- Legal battles over contentious subscription price increases
- Ongoing tax disputes with Nigerian authorities
- Broader concerns about data governance and digital consumer rights
Multichoice has not yet issued a public response to the fine, and attempts to reach the company were unsuccessful at the time of publication.
Nigeria’s Push for Data Protection Compliance
The Nigeria Data Protection Act (NDPA)—signed into law in 2023—established a comprehensive framework for how companies collect, store, and process personal data in the country. The NDPC is tasked with enforcing this law and holding violators accountable.
The ₦766 million fine against Multichoice serves as a warning to other organisations operating in Nigeria to comply with privacy regulations or face severe consequences. “We expect full adherence to data protection principles. Failure to do so will attract appropriate penalties,” Bamigboye emphasised.
