The Nigeria Data Protection Commission (NDPC) has officially opened a full-scale investigation into the data processing activities of global e-commerce powerhouse, Temu.
The directive, issued by the National Commissioner and CEO of the NDPC, Dr. Vincent Olatunji, comes amid mounting concerns regarding the platform’s compliance with the Nigeria Data Protection (NDP) Act.
The probe was triggered by several red flags related to how the platform handles the personal information of its rapidly growing Nigerian user base.
Key areas of concern identified by the Commission include online surveillance, data minimisation, cross-border transfers and accountability & transparency.
Preliminary findings by the NDPC reveal that Temu has achieved significant market penetration in Nigeria in a short period. The platform currently processes the personal information of approximately 12.7 million data subjects within the country.
This local surge is part of a broader global trend, as Temu boasts an estimated 70 million daily active users worldwide. The sheer volume of data involved has made the platform a “Data Controller of Major Importance” under Nigerian law.
Dr. Olatunji used the announcement to issue a stern warning to the broader tech industry, emphasising that third-party processors who handle data on behalf of larger controllers must verify that their partners are fully compliant with the NDP Act.
”Processors who engage in processing activities on behalf of data controllers without verifying their compliance may be held liable under the Act,” the National Commissioner stated.
The statement, signed by Babatunde Bamigboye Esq., Head of Legal, Enforcement & Regulations, underscores the Commission’s shift toward aggressive enforcement. This move follows a series of high-profile regulatory actions by the NDPC, including recent investigations into major financial institutions and multi-million dollar fines levied against tech giants for similar privacy breaches.
If found in violation, Temu could face significant administrative fines or enforcement orders requiring a total overhaul of its data architecture in Nigeria. For now, the 12.7 million Nigerians using the app are advised to remain cautious about the permissions they grant to mobile applications.