intrusive and disproportionate processing, cross-border transfer without consent, processing of non-subscriber data, unauthorised access to sensitive data
Provisions cited
NDPA 2023
Outcome
administrative fine imposed
Penalty
NGN 766,242,500 (≈ USD 501,000 at the decision date)
Following an investigation launched in the second quarter of 2024 into intrusive data processing, the NDPC found MultiChoice Nigeria had unlawfully processed personal data of subscribers and of individuals who were not its customers, and transferred Nigerians' data across borders without due process. The commission described the depth of the processing as patently intrusive, unfair, unnecessary and disproportionate, and deemed the company's response to remedial directions unsatisfactory.
Orders and outcome
The commission imposed a fine of N766,242,500 on MultiChoice Nigeria, having earlier directed remedial measures under its standard enforcement procedures.
NDPC (Nigeria), MultiChoice Nigeria Limited, penalty notice of 6 July 2025. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/nigeria/ndpc/2025/multichoice-cross-border-fine/ (accessed 30 August 2026).