Nigeria: Meta, NDPC Move to Settle $32.8 Million Data Privacy Dispute Out of Court

Global tech giant Meta and the Nigeria Data Protection Commission (NDPC) have agreed to resolve their $32.8 million data privacy dispute through an out-of-court settlement — a major development that could reshape how digital privacy enforcement unfolds in Nigeria.

The case, which has drawn global attention since the NDPC announced the fine earlier this year, stemmed from allegations that Meta—owner of Facebook, Instagram, and WhatsApp—violated Nigeria’s Data Protection Act 2023by processing citizens’ personal data without proper consent. The NDPC accused the company of using behavioural advertising to target users unfairly, transferring personal data across borders without authorization, and failing to submit a mandatory data audit report.

Following its investigation, the NDPC issued eight corrective orders and imposed a ₦32.8 million fine. Meta, however, disputed the sanctions, claiming it was denied a fair hearing and adequate notice before the penalty was imposed, thereby violating its right to due process. The company subsequently filed a motion seeking to nullify the NDPC’s decision.

In response, the NDPC’s legal counsel maintained that Meta’s objections were procedurally defective and inconsistent with established court rules. What began as a heated legal standoff took a surprising turn when both parties informed the court that they were exploring settlement options. The presiding judge granted an adjournment until October 31, 2025, to allow both sides to finalize discussions before proceeding to a possible ruling.

Industry experts say the outcome of this case will have far-reaching implications for data governance, privacy compliance, and digital trust across Africa. It represents one of the first major enforcement actions under the Nigeria Data Protection Act, signaling the regulator’s readiness to enforce privacy standards against both domestic and international players.

By pursuing an out-of-court resolution, both Meta and the NDPC are demonstrating a more pragmatic approach to compliance and enforcement. For the NDPC, the move reinforces Nigeria’s commitment to upholding citizens’ data rights, while for Meta, it offers an opportunity to rebuild trust and align its operations with Nigeria’s emerging data protection regime.

Observers note that the eventual terms of the settlement will be critical to shaping public confidence in Nigeria’s digital ecosystem. A resolution that includes strict compliance commitments could strengthen consumer trust in digital platforms, spurring growth in fintech, e-commerce, and data-driven services. Conversely, a perceived soft landing could raise concerns about accountability and regulatory fairness.

With Nigeria serving as Africa’s largest digital market, the case’s outcome is expected to influence how global tech firms engage with regulators across the continent. A firm regulatory stance by the NDPC could also bolster its credibility as a leading data protection authority in Africa, setting a precedent for other jurisdictions pursuing cross-border data compliance and AI-driven privacy enforcement.

As both parties prepare to return to court later in October, stakeholders will be watching closely. Whether concluded through settlement or judgment, the Meta–NDPC case marks a defining moment in Nigeria’s quest to balance innovation, privacy, and regulatory integrity in the digital age.