Meta given 60 days to settle $220 million fine over data misuse in Nigeria

Meta Platforms Inc. and its subsidiary WhatsApp have been ordered to pay a $220 million fine within 60 days after Nigeria’s Federal Competition and Consumer Protection Commission (FCCPC) upheld a major penalty for data protection violations.

The decision, confirmed by the Competition and Consumer Protection Tribunal on Friday, follows a 38-month investigation into Meta’s practices, conducted jointly by the FCCPC and the Nigeria Data Protection Commission (NDPC). Investigators found that Meta engaged in unauthorized sharing of Nigerian users’ data, failed to implement proper consent mechanisms, and discriminated against Nigerian consumers compared to users in other regions.

According to the FCCPC, Meta’s actions breached both the Nigerian Data Protection Regulation (NDPR) and the Federal Competition and Consumer Protection Act (FCCPA) of 2018.

Meta had appealed the ruling, arguing that the fine was excessive and that the FCCPC’s orders were vague and impractical to implement under Nigerian law. The company also claimed that data protection issues fall solely under the NDPC’s jurisdiction, not the FCCPC’s.

However, the tribunal dismissed Meta’s objections, ruling that the FCCPC acted within its lawful mandate and that Meta had been given ample opportunity to respond during the investigation.

In addition to the financial penalty, Meta and WhatsApp must immediately cease the unauthorized sharing of Nigerian users' data with third parties, including Facebook. They are required to reinstate user consent mechanisms, allowing Nigerians full control over how their data is shared, and must revert to their 2016 data-sharing policy.

Meta is also required to submit a full compliance report to the FCCPC and NDPC by July 1, 2025, and reimburse $35,000 in investigation costs.

This landmark ruling signals Nigeria’s growing resolve to enforce data protection laws and to hold multinational tech giants accountable for their operations within the country. The African country is also engaged in another legal battle with Binance after it sued the crypto giant for $81.5 billion in economic losses and back taxes.Meta given 60 days to settle $220 million fine over data misuse in Nigeria.

Meta Platforms Inc. and its subsidiary WhatsApp have been ordered to pay a $220 million fine within 60 days after Nigeria’s Federal Competition and Consumer Protection Commission (FCCPC) upheld a major penalty for data protection violations.

The decision, confirmed by the Competition and Consumer Protection Tribunal on Friday, follows a 38-month investigation into Meta’s practices, conducted jointly by the FCCPC and the Nigeria Data Protection Commission (NDPC). Investigators found that Meta engaged in unauthorized sharing of Nigerian users’ data, failed to implement proper consent mechanisms, and discriminated against Nigerian consumers compared to users in other regions.

According to the FCCPC, Meta’s actions breached both the Nigerian Data Protection Regulation (NDPR) and the Federal Competition and Consumer Protection Act (FCCPA) of 2018.

Meta had appealed the ruling, arguing that the fine was excessive and that the FCCPC’s orders were vague and impractical to implement under Nigerian law. The company also claimed that data protection issues fall solely under the NDPC’s jurisdiction, not the FCCPC’s.

However, the tribunal dismissed Meta’s objections, ruling that the FCCPC acted within its lawful mandate and that Meta had been given ample opportunity to respond during the investigation.

In addition to the financial penalty, Meta and WhatsApp must immediately cease the unauthorized sharing of Nigerian users' data with third parties, including Facebook. They are required to reinstate user consent mechanisms, allowing Nigerians full control over how their data is shared, and must revert to their 2016 data-sharing policy.

Meta is also required to submit a full compliance report to the FCCPC and NDPC by July 1, 2025, and reimburse $35,000 in investigation costs.

This landmark ruling signals Nigeria’s growing resolve to enforce data protection laws and to hold multinational tech giants accountable for their operations within the country. The African country is also engaged in another legal battle with Binance after it sued the crypto giant for $81.5 billion in economic losses and back taxes.