Meta and NDPC to reach $32.8M data privacy deal, averting court battle
Meta’s $32.8 million showdown with Nigeria’s data watchdog could mark a turning point for digital accountability in Africa.
Meta’s run-in with Nigeria didn’t start in a courtroom; it started with data. Millions of users’ information, quietly collected and processed, has now turned into a $32.8 million storm that could reshape how Big Tech operates across Africa.
Back in February, the Nigerian Data Protection Commission (NDPC) accused Meta of crossing several lines under the newly minted Data Protection Act. The commission said the company processed Nigerians’ personal data for behavioural advertising without consent, failed to file its 2022 audit, and transferred local data abroad without authorisation. In response, the NDPC issued eight corrective orders and a $32.8 million fine, marking one of the first major tests of Nigeria’s digital privacy law.
Meta pushed back, claiming the process was unfair and that it wasn’t given a proper hearing. Its lawyers challenged the orders in court, while the NDPC insisted the tech giant’s filings were “grossly incompetent.”
For months, both sides traded arguments over jurisdiction and due process, setting the stage for what looked like a defining moment for digital regulation in Africa’s largest internet market.
Then came the pivot. At a hearing last Friday, both Meta and the NDPC told the judge they were exploring an out-of-court settlement, with draft terms already exchanged. The court agreed to give them until October 31 to finalise the deal or face a ruling. What had started as a high-stakes legal clash now appears to be heading for a diplomatic close.
This settlement is one of three major fines Meta has faced in Nigeria since 2024. The FCCPC earlier fined the company $220 million for alleged discriminatory practices, while ARCON imposed a $37.5 million penalty for advertising violations. Though both cases are still pending, Meta’s move hints at plans to stay in Nigeria and possibly reach similar settlements with other regulators.
Beyond the courtroom, this case underscores Nigeria’s growing confidence in enforcing its digital laws. In July, the NDPC fined MultiChoice ₦766 million for unlawfully transferring subscriber data abroad. Back-to-back enforcement actions like these show the commission is not just testing its powers, it’s using them.
For Nigerians, the impact goes beyond headlines. Stronger enforcement could boost trust in how platforms handle data, key for fintech, e-commerce, and digital banking growth. But a soft settlement might weaken that trust before it’s built.
Across Africa, regulators are watching. Nigeria’s stance could set the standard for data protection, influencing countries like Kenya and South Africa.
As the October deadline approaches, both sides have much at stake, but Nigeria has more to prove. The outcome will shape how Big Tech responds to Africa’s push for digital accountability.

