The Nigeria Data Protection Commission (NDPC) has initiated an immediate investigation into the data processing activities of the global eCommerce giant, Temu. The probe, ordered by the National Commissioner and CEO, Dr. Vincent Olatunji, follows allegations that the platform may be in breach of the Nigeria Data Protection Act (NDP Act), 2023.
According to a press release issued on February 16, 2025, the investigation was triggered by mounting concerns over Temu’s handling of personal information. Key areas of focus include allegations of online surveillance, lack of transparency, and failure to adhere to data minimisation principles. The regulator is also scrutinising the platform’s accountability, duty of care, and its protocols for cross-border data transfers.
Preliminary findings from the NDPC indicate that Temu currently processes the personal data of approximately 12.7 million individuals in Nigeria. On a global scale, the platform maintains a massive footprint with an estimated 70 million daily active users. The sheer volume of Nigerian data involved has heightened the urgency of the Commission’s regulatory oversight.
Dr. Olatunji further warned that third-party data processors acting on behalf of controllers must verify compliance with the NDP Act. Under the current legal framework, such processors risk being held directly liable if they engage in activities that do not comply with Nigerian statutory requirements.to t
In a statement to Techpoint Africa on February 17, 2026, Temu confirmed receipt of the NDPC’s inquiry and emphasis ed its willingness to work with the regulator.
“At Temu, protecting user privacy and data security is a top priority,” the company stated. “We are committed to complying with applicable laws and regulations in our data practices. We will continue to engage in open and constructive dialogue with the NDPC to address any questions or concerns.”
The NDPC’s investigation into Temu’s data practices reflects a growing global trend of increased scrutiny of the data-harvesting practices of high-growth eCommerce platforms. This investigation marks a significant assertion of digital sovereignty by Nigeria, which is currently the continent’s largest internet market.
The NDPC has been increasingly active since its inception. In March 2025, it ordered a similar investigation into TikTok and Truecaller. In July 2025, the Commission imposed a landmark ₦766.24 million fine on MultiChoice Nigeria following a year-long probe into intrusive data processing and illegal cross-border transfers involving both subscribers and non-subscribers.
Nigeria has also taken a firm stance against Western tech giants. In April 2025, the Competition and Consumer Protection Tribunal upheld a $220 million fine against Meta (parent company of WhatsApp and Facebook) for discriminatory and exploitative practices.
Victoria Fakiya – Senior Writer
Techpoint Digest
Stop struggling to find your tech career path
Discover in-demand tech skills and build a standout portfolio in this FREE 5-day email course
While a separate $32.8 million fine from the NDPC over behavioral advertising was later resolved through a consent judgment in October 2025, the case forced Meta to commit to specific corrective privacy measures for Nigerian users.
Temu faces similar headwinds across the continent. In late 2025, South Africa’s National Consumer Commission (NCC) launched a formal investigation into Temu and Shein, probing their compliance with the Consumer Protection Act and expressing growing concern over their use of algorithms and data-mining practices to drive consumer engagement.
The NDPC’s move against global corporations signals a definitive end to the era of data harvesting in Nigeria. As the Commission broadens its net, this investigation serves as a high-stakes reminder that growth at the expense of privacy is no longer a viable strategy in Africa’s largest economy.
For global platforms, the outcome of this probe will set a decisive precedent: localised data ethics are no longer optional. To operate in Nigeria’s maturing digital landscape, tech giants must choose between aligning their algorithms with the NDP Act or operating in a regulatory environment where massive fines and market exclusion are the norm for non-compliance.
