In a major regulatory move that’s sending shockwaves across the tech and media industry, MultiChoice Nigeria—the company behind popular cable services DStv and GOtv—has been slammed with a ₦766 million fine by the Nigeria Data Protection Commission (NDPC).
The fine, announced on Sunday, July 7, 2025, comes after a year-long investigation revealed serious breaches of the Nigeria Data Protection Act (NDPA). The Commission says the company violated fundamental privacy rights by processing customer data without consent and sending it across Nigerian borders without authorization.
What Did MultiChoice Do?
The NDPC’s investigation uncovered two major violations:
Unauthorized Data Collection
MultiChoice was reportedly collecting and processing personal data—including that of non-subscribers—without obtaining proper user consent.
Illegal Data Transfer Across Borders
The company was also transferring customer data to servers outside Nigeria without complying with data protection laws.
According to the NDPC, these practices were
“Intrusive, unfair, unnecessary, and disproportionate.”
Such violations, the commission noted, undermine the right to privacy enshrined in Section 37 of the 1999 Nigerian Constitution.
How Did This Unfold?
The investigation began in Q2 2024, with the NDPC issuing initial warnings and remediation guidelines to MultiChoice. However, after failing to adequately comply with those directives, the commission decided to issue the penalty.
NDPC’s National Commissioner, Dr. Vincent Olatunji, stated that
“This decision sends a strong message that no company is above the law when it comes to protecting the data of Nigerian citizens.”
The commission also announced that it will begin auditing all outlets and third parties affiliated with MultiChoice that may be collecting or managing Nigerian users’ data.
Why This Matters
This is more than a regulatory slap on the wrist. It sets a precedent for how digital privacy violations will be treated in Nigeria going forward.
What’s Next?
MultiChoice is expected to pay the fine and implement data compliance measures.
NDPC will be conducting further audits of similar firms handling large amounts of personal data.
Other Nigerian companies are on alert—regulatory oversight is increasing.
Conclusion
In today’s world, data is currency—and with that comes responsibility. The fine against MultiChoice is not just about money; it’s about restoring trust in how companies handle sensitive information. It’s a wake-up call for all businesses: If you collect it, protect it.
As Nigeria continues to strengthen its digital and data privacy laws, one thing is clear: compliance is no longer optional.
💬 What’s your take on this development? Do you think the fine was justified? Let us know in the comments below.
