The Nigeria Data Protection Commission (NDPC) has launched an investigation into alleged data privacy violations by popular social media app TikTok and phone directory service Truecaller. The probe is aimed at determining whether the companies have complied with Nigeria’s data protection regulations.
Vincent Olatunji, National Commissioner and Chief Executive Officer of the NDPC, stated this at a Press Conference in Abuja, “As we speak, we have even gone to the extent of investigating multinationals. We are currently investigating TikTok and Truecaller in the area of data privacy,” Olatunji stated.
Olatunji emphasized that if TikTok and Truecaller take corrective actions, the commission would be open to working with them rather than imposing immediate penalties.
The NDPC has requested that TikTok and Truecaller provide detailed information about their data collection and processing practices, as well as their data protection policies and procedures. The investigation is a significant development in Nigeria’s efforts to protect the personal data of its citizens. The country’s data protection regulations, which were introduced in 2019, require companies to obtain the consent of individuals before collecting and processing their personal data. Companies are also required to provide adequate protection for personal data, and to notify the NDPC in the event of a data breach.
TikTok and Truecaller are not the only companies to have faced scrutiny over their data protection practices in Nigeria. In 2022, the NDPC fined a number of companies, including Facebook and Instagram, for violating Nigeria’s data protection regulations.
The NDPC’s investigation into TikTok and Truecaller is a clear indication that the commission is committed to enforcing Nigeria’s data protection regulations. The commission’s actions are aimed at protecting the personal data of Nigerian citizens, and at promoting a culture of data protection in the country.
The investigation is also a reminder to companies operating in Nigeria of the importance of complying with the country’s data protection regulations. Companies that fail to comply with the regulations risk facing fines and other penalties, as well as damage to their reputation.
The NDPC’s Commissioner, Dr. Vincent Olatunji, emphasized the importance of data protection in Nigeria. “The NDPC is committed to protecting the personal data of Nigerian citizens,” he said. “We will continue to work with companies to ensure that they comply with Nigeria’s data protection regulations, and we will take action against companies that fail to comply.”
During the Press Conference, the NDPC presented the Nigeria Data Protection Act General Application and Implementation Directive (NDP Act-GAID), which serves as a detailed guide for data controllers and processors to follow the rules.
The investigation into TikTok and Truecaller is ongoing, and the NDPC has not yet announced any findings or penalties. However, the investigation is a significant development in Nigeria’s efforts to protect the personal data of its citizens, and it serves as a reminder to companies operating in the country of the importance of complying with the country’s data protection regulations.
