Meta Platforms Inc., the parent company of Facebook and Instagram, has agreed to settle a $32.8 million data privacy fine with the Nigerian government, marking a landmark moment for digital rights enforcement in Africa.
The fine, imposed by the Nigeria Data Protection Commission (NDPC) in February 2025, followed allegations that Meta violated provisions of the Nigeria Data Protection Act. According to the NDPC, Meta was accused of using Nigerian users’ data for behavioural advertising without explicit consent, processing the personal data of non-users, failing to submit mandatory compliance audits, and transferring user data abroad without proper authorisation.
After months of legal disputes, Meta—initially challenging both the fine and its legal basis—has opted for an out-of-court settlement, which is expected to be finalised by the end of October 2025. The decision signals the tech giant’s readiness to align with Nigeria’s tightening data protection regulations.
As part of the settlement, the NDPC has directed Meta to revise its privacy policies, conduct localised data protection impact assessments, and obtain explicit user consent before engaging in any targeted advertising. Regulators say the outcome could set a precedent for how global tech firms handle user data across Africa’s expanding digital markets.
An NDPC official described the case as a milestone in Africa’s digital governance efforts, stating that it “underscores the importance of respecting user privacy and adhering to national data protection standards.”
The development comes amid growing calls across the continent for digital sovereignty and user protection, with Nigeria positioning itself as a leader in enforcing data accountability among multinational technology companies.
It remains to be seen how the agreement will affect Meta’s operations and data practices in Nigeria and other African markets navigating similar regulatory transformations.
