The National Data Protection Commission (NDPC) has commenced an investigation into the e-commerce platform, Temu, over alleged violations of the Nigeria Data Protection Act (NDPA), 2023.
In a statement signed by Babatunde Bamigboye, Head, Legal, Enforcement & Regulations at the NDPC, the commission said the probe was triggered by concerns regarding “online surveillance through personal data processing, accountability, data minimisation requirements, transparency, duty of care, and cross-border data transfer.”
According to the statement, preliminary findings indicate that Temu “processes personal information of approximately 12.7 million data subjects in Nigeria with 70 million daily active users globally.”
The NDPC also warned data processors who act on behalf of controllers without ensuring compliance with the law. “Processors who engage in processing activities on behalf of data controllers without verifying their compliance with the NDP Act may be liable under the NDP Act,” the statement added.
Dr. Vincent Olatunji, NDPC National Commissioner and CEO, has directed that the investigation be conducted immediately to ensure adherence to Nigeria’s data protection framework.
The NDPC urged all digital platforms operating in the country to review their data handling practices to avoid sanctions under the law.
