A statement by the the Federal Competition and Consumer Protection Commission ,FCCPC, said the decision was taken after its joint investigation with the Nigeria Data Protection Commission ,NDPC, revealed extensive and ongoing violations of Nigerian laws, following a comprehensive 38-month investigation into its data privacy practices and market behaviour.
According to the statement, between May 2021 and December 2023, the investigation scrutinised Meta’s privacy policies and practices, uncovering multiple infringements of the Federal Competition and Consumer Protection Act ,FCCPA, and the Nigeria Data Protection Regulation ,NDPR.
These violations include the unauthorised appropriation of personal data without user consent, discriminatory practices against Nigerian users, and the abuse of Meta’s dominant market position.
The investigation concluded that Meta engaged in abusive and invasive practices against Nigerian data subjects, such as transferring personal data across borders without authorization and forcing users to accept exploitative privacy policies. Despite being given numerous opportunities to present their case, Meta’s defences were deemed insufficient by the regulatory bodies.
The final order issued by the FCCPC mandates several corrective actions for Meta to comply with Nigerian laws. These include ensuring Nigerian users’ right to data self-determination, ceasing unauthorized data transfers, and eliminating discriminatory practices. The order also imposes a $220 million penalty on Meta, emphasizing the gravity of the violations.