NDPC launches probe into alleged data protection violations by Temu

The Nigeria Data Protection Commission (NDPC) has opened an investigation into global e-commerce platform Temu over alleged violations of the country’s data protection laws.

NDPC’s National Commissioner and Chief Executive Officer, Vincent Olatunji, ordered an immediate probe into the company’s data processing practices following concerns that they may breach provisions of the Nigeria Data Protection Act.

According to the Commission, the move was triggered by issues surrounding possible online surveillance linked to personal data processing, as well as concerns about accountability, compliance with data minimisation principles, transparency obligations, duty of care, and the handling of cross-border data transfers.

Preliminary findings suggest that Temu operates as a major e-commerce platform handling the personal data of an estimated 12.7 million users in Nigeria, while recording around 70 million daily active users globally.

The Commission also warned third-party data processors that organisations handling data on behalf of controllers without verifying their compliance with the Data Protection Act could be held liable under Nigerian law.

The NDPC said the investigation forms part of its mandate to protect the privacy rights of Nigerians and ensure that companies operating within the country strictly adhere to established data protection standards.