Meta Platforms, Inc. and the Nigeria Data Protection Commission (NDPC) have reached an out-of-court settlement in their dispute over a $32.8 million fine imposed on Meta for alleged data privacy violations. The settlement terms were adopted as a consent judgment by the Federal High Court in Abuja on November 3, 2025, effectively ending the litigation.
Details of the Dispute and Resolution
- The Allegations: The NDPC imposed the fine and eight corrective orders in February 2025, following a complaint that Meta had violated the privacy rights of Nigerian users through its behavioral advertising practices on Facebook and Instagram.
- Specific Violations Included:
- Processing the personal data of users and non-users without explicit consent.
- Failing to file a mandatory annual compliance audit report for 2022.
- Unauthorised transfer of Nigerian citizens’ personal data outside the country.
- Processing sensitive information, including that of minors, for targeted advertising.
- Meta’s Response: Meta challenged the sanctions in court through a judicial review, arguing that the NDPC exceeded its powers and denied the company a fair hearing and due process.
- The Settlement: Both parties agreed to pursue an amicable resolution outside of court, which the presiding judge, Justice James Omotosho, encouraged. The specific terms of the settlement were entered as the judgment of the court on November 3, 2025.
The resolution of this case marks one of the first major enforcement actions under the Nigeria Data Protection Act 2023, setting a significant precedent for how global technology firms operate within Nigeria’s regulatory framework.
