The news:
- Nigeria’s Federal Competition and Consumer Protection Commission (FCCPC) has upheld a $220 million fine on Meta and WhatsApp for data privacy violations affecting over 51 million users.
- The Competition and Consumer Protection Tribunal upheld the penalty, dismissing Meta’s appeal and ordering compliance within 60 days.
- FCCPC’s investigation revealed unauthorised data sharing, lack of user consent mechanisms, and discriminatory practices compared to other regions.
Nigeria’s Federal Competition and Consumer Protection Commission (FCCPC) has upheld a $220 million fine on Meta Platforms Inc. and its subsidiary WhatsApp for violating the country’s data protection and consumer rights laws.
The penalty, which Meta must pay within 60 days, was upheld by the Competition and Consumer Protection Tribunal on Friday, April 25, 2025, following a comprehensive investigation.
The FCCPC’s probe, conducted in collaboration with the Nigeria Data Protection Commission (NDPC), identified multiple violations, including unauthorised sharing of Nigerian users’ data, lack of consent mechanisms, and discriminatory practices that treated Nigerian consumers differently from users in other regions.
These findings were based on a 38-month investigation that began in May 2021. The commission emphasised that Meta’s actions contravened the Nigeria Data Protection Regulation (NDPR) and the Federal Competition and Consumer Protection Act (FCCPA) 2018.
In response, Meta appealed the decision, arguing that the fine was excessive and that the FCCPC’s directives were vague and technically impossible to implement under Nigerian law. The company also contended that data protection issues fall under the jurisdiction of the NDPC, not the FCCPC.
However, the tribunal dismissed these arguments, affirming that the FCCPC acted within its lawful mandate and that Meta had been provided ample opportunity to be heard.
The tribunal’s ruling mandates that Meta and WhatsApp immediately cease the unauthorised sharing of Nigerian users’ data with third parties, including Facebook. They are also required to reinstate user consent mechanisms, allowing Nigerians to determine how their data is shared, and to revert to their 2016 data-sharing policy.
Additionally, Meta must submit a compliance report to the FCCPC and NDPC by July 1, 2025, and reimburse the FCCPC $35,000 for investigation costs.
This landmark decision underscores Nigeria’s commitment to enforcing data protection laws and holding multinational tech companies accountable for their practices. It also signals to other global firms operating in Nigeria the importance of adhering to local regulations and respecting consumer rights.
