Nigeria Fines Meta $220 Million for Data Privacy Violation
Nigeria’s Federal Competition and Consumer Protection Commission (FCCPC) has imposed a $220 million fine on Meta Platforms for breaching data privacy laws.
The fine, which targets Meta’s data-sharing practices on Facebook and WhatsApp, marks a significant step in Nigeria’s efforts to enforce data protection regulations.
The FCCPC’s decision, announced in a statement, highlights Meta’s violations of local consumer and data protection laws.
According to the commission, Meta denied Nigerian users control over their data, shared data without consent, and abused its market dominance.
Acting Executive Chairman Adamu Abdullahi signed the statement, which detailed the breaches and the ensuing penalties.
“The Final Order imposes a monetary penalty of Two Hundred and Twenty Million U.S. Dollars only ($220,000,000.00), which is in accordance with the FCCPA 2018 and the Federal Competition and Consumer Protection (Administrative Penalties) Regulations 2020,” the statement read.
The FCCPC began its investigation into Meta in May 2021, prompted by evidence suggesting that the company had violated the Federal Competition and Consumer Protection Act 2018 and the Nigeria Data Protection Regulation 2019.
These regulations were in effect before the enactment of the Nigeria Data Protection Act 2023.
Despite Meta’s engagement with the commission, including providing documents and meeting with investigators as recently as April 2024, the investigation revealed significant abuses.
The commission’s findings indicated that Meta collected personal data without consent and engaged in discriminatory practices against Nigerians.
The investigation’s final order addressed several infringements, including denying Nigerian data subjects the right to self-determine, unauthorised transfer and sharing of personal data, and abuse of market dominance.
“The Final Order of the Commission mandates steps and actions Meta Parties must take to comply with prevailing law and cease the exploitation of Nigerian consumers and their market abuse,” the FCCPC stated.
The order also requires Meta to desist from future conduct that undermines the rights of consumers.
This decision follows a recent ruling by the Federal High Court in Abuja, which dismissed a N30 billion lawsuit filed by the Advertising Regulatory Council of Nigeria against Meta and its agent AT3 Resources Limited.
The court dismissed the case after the plaintiff’s attorney submitted a notice of discontinuance.
Nigeria has been ramping up its efforts to prioritise data privacy, evident in the recent enactment of the Nigeria Data Protection Act in June 2023.
This law establishes a comprehensive framework for personal data protection and creates the Nigeria Data Protection Commission as the regulatory body.
The law mandates that organisations process data fairly and transparently, ensuring individuals’ rights and providing avenues for redress in case of breaches.