{"id":90270,"date":"2025-12-13T19:26:25","date_gmt":"2025-12-13T19:26:25","guid":{"rendered":"https:\/\/dnllegalandstyle.com\/dnl\/?p=90270"},"modified":"2025-12-14T09:07:52","modified_gmt":"2025-12-14T09:07:52","slug":"meta-and-ndpcs-consent-judgment-a-blow-to-nigerias-data-sovereignty-and-disregard-to-citizens-privacy-rights","status":"publish","type":"post","link":"https:\/\/dnllegalandstyle.com\/dnl\/meta-and-ndpcs-consent-judgment-a-blow-to-nigerias-data-sovereignty-and-disregard-to-citizens-privacy-rights\/","title":{"rendered":"META and NDPC\u2019S Consent Judgment: A Blow to Nigeria’s Data Sovereignty and Disregard for Citizens Privacy Rights?"},"content":{"rendered":"\n


By Olumide Babalola<\/em><\/strong><\/p>\n\n\n\n

Background<\/strong><\/p>\n\n\n\n


In February 2025, news of the Nigeria Data Protection Commission\u2019s (NDPC) $32.8 million fine against Meta made headlines. Reactions were mixed: some praised the NDPC for its courage, others questioned the basis of the fine, while sceptics doubted any meaningful outcome would result.<\/p>\n\n\n\n

When Meta challenged the fine in court and the NDPC responded, many anticipated a landmark African judgment on data protection. Yet, in an unexpected turn, both parties entered into settlement negotiations. The resulting terms of settlement were later adopted as a consent judgment by the Federal High Court on 3rd November 2025. I recently became interested in the terms of the settlement when a civil society invited me to lead an evidence-based research on accountability of Big Tech companies in Nigeria. Hence, from the certified true copy obtained from the registry of the Federal High Court, the following are my open-minded observations, some of which reveal several troubling implications.<\/p>\n\n\n\n

The Final Order Set Aside<\/strong><\/p>\n\n\n\n

Clause 9.2 of the terms reproduced as consent judgment states that the NDPC \u201csets aside the Final Orders against Meta.\u201d This is arguably the most concerning clause. The 58-page Final Order reflects two years of investigation, hearings, and taxpayer-funded proceedings. Yet, the settlement nullifies all that work. Not only does this undermine the NDPC\u2019s investigative efforts, but it also shields Meta from accountability and limits victims\u2019 ability to seek redress.<\/p>\n\n\n\n

The Fine Effectively Nullified<\/strong><\/p>\n\n\n\n

The terms of settlement and consent judgment do not stipulate any payment from Meta. Clause 9.2 discharges Meta from \u201call claims, demands, actions, causes of action, contracts, obligations, suits, debts, costs, liabilities.\u201d In effect, the NDPC has no official path to collect the $32.8 million fine, leaving only the possibility of an informal, undisclosed arrangement.<\/p>\n\n\n\n

Contradictions Within the Settlement<\/strong><\/p>\n\n\n\n

Clause 8 of the settlement outlines obligations for Meta, yet clause 9.2 discharges the company from \u201cobligations.\u201d This contradiction undermines both the optics and enforceability of the agreement, raising questions about the seriousness of Nigeria\u2019s regulatory oversight.<\/p>\n\n\n\n

Whistleblower Efforts Undermined<\/strong><\/p>\n\n\n\n

The Final Order was issued in response to a petition from a civil society organization. The consent judgment effectively nullifies the outcome of this patriotic whistleblowing effort. The NDPC\u2019s investigation, which followed due process, is rendered meaningless for the whistleblowers and the public.<\/p>\n\n\n\n

Meta\u2019s Track Record Abroad<\/strong><\/p>\n\n\n\n

NDPC\u2019s fine was not unprecedented globally. Meta has faced over \u20ac2.7 billion in GDPR fines in Europe, including a \u20ac481 million civil damages order in Spain in 2025 for unfair use of personal data. Yet, unlike in Nigeria, enforcement actions abroad have resulted in tangible penalties. The Nigerian settlement appears to be the first instance where Meta successfully challenged a fine and paid nothing (going by the records).<\/p>\n\n\n\n

A First in Africa, But at What Cost?<\/strong><\/p>\n\n\n\n

NDPC\u2019s original decision was celebrated as a pioneering move in Africa. However, the settlement undermines that achievement, setting a worrying precedent for regulatory enforcement on the continent.<\/p>\n\n\n\n

Implications for Nigeria\u2019s Data Sovereignty<\/strong><\/p>\n\n\n\n

By vacating its enforcement decision against Meta, NDPC raises serious concerns about Nigeria\u2019s control over its citizens\u2019 personal data. Data sovereignty relies on the principle that personal data generated within Nigeria remains subject to Nigerian law and oversight. When violations involving cross-border data transfers can be neutralized via settlement, Nigeria\u2019s ability to assert authority over its citizens\u2019 data is weakened. This reinforces the imbalance between Global South regulators and powerful Global North technology companies, reducing Nigeria\u2019s leverage in setting global data standards.<\/p>\n\n\n\n

Circumventing Criminal Accountability<\/strong><\/p>\n\n\n\n

Section 49 of the Nigeria Data Protection Act (NDPA) makes failure to comply with NDPC orders a criminal offense. Meta\u2019s actions, therefore, constituted a criminal violation. The settlement effectively circumvents this accountability, raising dangerous implications for future regulatory enforcement.<\/p>\n\n\n\n

Victims Left Unprotected<\/strong><\/p>\n\n\n\n

Ultimately, this episode affects over 60 million Nigerians whose data was misused. With the Final Order set aside, victims remain without redress, undermining the NDPC\u2019s mandate to protect citizens\u2019 privacy.<\/p>\n\n\n\n

Double Standards in Enforcement
NDPC has successfully fined other entities in Nigeria, who complied with its orders. Meta, however, has been treated differently, creating an unequal enforcement landscape.<\/p>\n\n\n\n

Setting a Precedent for Future Violators
This consent judgment risks creating a blueprint for multinational companies to evade regulatory penalties in Nigeria, weakening the credibility of the NDPC and the broader regulatory framework.<\/p>\n\n\n\n

Conclusion<\/strong><\/p>\n\n\n\n


While the NDPC\u2019s original fine against Meta represented a bold step for data protection in Africa, the subsequent consent judgment has diminished its impact. By vacating the Final Order and discharging Meta from all claims and obligations, Nigeria has compromised its data sovereignty, undermined whistleblowers, and left millions of citizens without recourse. This episode highlights the urgent need for stronger, consistent enforcement mechanisms to ensure that multinational technology companies are held accountable in Nigeria.<\/p>\n\n\n\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

By Olumide Babalola Background In February 2025, news of the Nigeria Data Protection Commission\u2019s (NDPC) $32.8 million fine against Meta made headlines. Reactions were mixed: some praised the NDPC for its courage, others questioned the basis of the fine, while sceptics doubted any meaningful outcome would result. When Meta challenged the fine in court and […]<\/p>\n","protected":false},"author":9,"featured_media":90265,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_hide_featured_image":false,"_jetpack_featured_image_duplicate_dismissed":0,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[5],"tags":[],"class_list":["post-90270","post","type-post","status-publish","format-standard","has-post-thumbnail","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t