Meta Platforms Inc., the parent company of Facebook and Instagram, is facing a major legal challenge in Nigeria over a $32.8 million fine imposed by the Nigeria Data Protection Commission (NDPC). The Commission claims Meta violated the data privacy rights of Nigerian citizens by conducting behavioral advertising without users’ consent and misusing sensitive data. The company has taken the matter to court, but the NDPC argues the lawsuit is procedurally flawed and should be dismissed.
The NDPC’s sanctions followed a petition from a civil society group, the Personal Data Protection Awareness Initiative (PDPAI), which triggered an investigation. The Commission’s findings alleged Meta used sensitive personal data—such as information on minors’ sex lives and drug use—manipulated journalist profiles, and processed childbirth footage. Additionally, Meta was accused of breaching cross-border data rules and collecting data from people who don’t even use its platforms.
Meta’s legal team argues the NDPC acted in violation of the Nigerian Constitution by denying the company a fair hearing. According to Meta, the Commission failed to give adequate notice or opportunity to respond before imposing sanctions. In its March court filing, Meta asked for the corrective orders to be quashed and the fine nullified.
The NDPC, however, remains firm. Its lawyer contends that Meta’s suit is defective, inconsistent, and includes reliefs not originally stated. The Commission accuses Meta of attempting to improperly amend its claims mid-case. In response, Meta filed another motion in April seeking permission to officially update its court documents for clarity.
The case, being presided over by Justice James Omotosho, is now set for a ruling on October 3, 2025. The judge previously declined to pause the sanctions but approved an expedited hearing. The case is widely viewed as a landmark test of Nigeria’s 2023 Data Protection Act. Notably, Meta isn’t the only target of NDPC enforcement—Multichoice Nigeria was recently fined N766.2 million for similar data breaches.
Source: The sun