Nigeria’s Federal Competition and Consumer Protection Commission (FCCPC) has imposed a hefty $220 million fine (about N330 billion) on Meta Platforms Inc., the parent company of Facebook, WhatsApp, and Instagram, for allegedly abusing the data of Nigerian users.
In a statement released by FCCPC chairperson Adamu Abdullahi, the agency detailed the findings of its investigation into Meta’s operations, which spanned from May 2021 to December 2023.
“Meta cooperated with the agency during the investigation,” Abdullahi noted, adding that the company provided some “information/evidence that are in part responsive to document requests and summons…”.
The FCCPC’s findings concluded that Meta “over a protracted period of time have engaged in conducts that constitute multiple and repeated violations of the FCCPA and NDPR, particularly, but not limited to abusive and invasive practices against data subjects/consumers.”
This significant fine underscores Nigeria’s commitment to protecting consumer data and ensuring that multinational tech companies adhere to local regulations. Meta has yet to respond publicly to the FCCPC’s findings and the imposed fine.
The statement FCCPC read in full below:
IN THE MATTER OF META PLATFORMS, INC. AND WHATSAPP LLC: INVESTIGATION INTO ALLEGED VIOLATIONS OF THE FEDERAL COMPETITION AND CONSUMER PROTECTION ACT (FCCPA) 2018, NIGERIA DATA PROTECTION REGULATION 2019 (NDPR), AND OTHER RELEVANT LAWS
Pursuant to Sections 17, 18, 32, 70, 71, 72, 108, 112, 119, 124, 127, and 155 of the FCCPA 2018; and Regulations 1.2, 1.3, 2.1, 2.11, 2.2, 2.3, 2.5, and 3.1 of the NDPR 2019.
Friday, July 19, 2024: On May 2021, the Federal Competition and Consumer Protection Commission (Commission) based on available evidence and sufficient probable cause issued an Order and Notice to Show Cause (ONSC) to WhatsApp LLC and Meta Platforms, Inc. (formerly called Facebook Inc.) jointly referred to as ‘Meta Parties’ in respect to this investigation. The subject of the ONSC was to relay the Commission’s investigative report in respect of its findings that the Meta Parties by their conduct have violated the above stated provisions of the FCCPA and NDPR (which was in force prior to the enactment and operationalisation of the NDPA(Nigeria Data Protection Act), 2023) and for the Meta Parties to show reasonable cause why the Commission should not proceed to enter its orders as final and enforceable pursuant to the FCCPA, particularly sections 17, 18, 155, and 159.
Between May 2021 and December 2023, and over this period of 38 months, a joint investigation by the Commission, and the Nigeria Data Protection Commission (NDPC) into Meta Parties conduct, privacy policies, the operation thereof, and Meta Parties practices has evolved. Meta Parties have provided some information/evidence that is in part responsive to document requests and summons under the joint investigation. Meta Parties by themselves, and retained counsels have also repeatedly engaged with, and met with investigators and analysts from the Commission, and the NDPC, including as recently as April 4, 2024.
The totality of the investigation has concluded that Meta Parties over a protracted period of time have engaged in conduct that constitute multiple and repeated, as well as continuing infringements of the FCCPA and NDPR, particularly, but not limited to abusive, and invasive practices against data subjects/consumers in Nigeria, such as appropriating personal data or information without consent, discriminatory practices against Nigerian data subjects/consumers or disparate treatment of consumers/data subjects compared with other jurisdictions with similar regulatory frameworks, abuse of dominant market position by forcing unscrupulous, exploitative, and non-compliant privacy policies which appropriated consumer personal information without the option or opportunity to self-determine or otherwise withhold or provide consent to the gathering, use, and/or sharing of such personal data.
Being satisfied with the significant evidence on the record, and that Meta Parties have been provided every opportunity to articulate any position, representations, refutations, explanations or defences of their conduct and practices under law, the Commission have now entered a Final Order, and issued a penalty against Meta Parties. The Final Order more elaborately describes the specific conduct or practices of the Meta Parties, relationship between Meta Parties with respect to the infringements, particularly with regard to:
- Denying Nigerian data subjects the right to self-determine;
- Unauthorized transfer and sharing of Nigerian data-subjects personal data, including cross- border storage in violation of then, and now prevailing law;
- Discrimination and disparate treatment;
- Abuse of Dominance; and
- Tying and bundling.
The Final Order of the Commission mandates steps and actions Meta Parties must take to comply with prevailing law and cease the exploitation of Nigerian consumers and their market abuse, as well as desist from future similar or other conduct/practices that do not meet nationally applicable standards and undermine the rights of consumers.
The Final order also imposes a monetary penalty of Two Hundred and Twenty Million U.S. Dollars only ($220,000,000.00) (at prevailing exchange rate where applicable) which penalty is in accordance with the FCCPA 2018, and the Federal Competition and Consumer Protection (Administrative Penalties) Regulations 2020 (APR). The Commission remains committed to its respective mandates to protect the privacy of Nigerians under the Constitution and all data protection laws and regulations, as well as to ensure that consumer rights are respected, and the markets operate in a fair and transparent manner. The Commission appreciates the collaboration by the NDPC, this collaboration and joint investigation demonstrates the mutual desire to ensure compliance with the law, and that malfeasance lead to appropriate accountability.
Dr. Adamu Abdullahi
Ag. Executive Vice Chairman/CEO