NDPC Launches Probe into Chinese E-Commerce Giant Temu Over Alleged Massive Data Privacy Violations Affecting 12.7 Million Nigerians

By Emmanuel Kwada

The Nigeria Data Protection Commission (NDPC) has initiated a formal investigation into Temu, the popular Chinese-owned online shopping platform, for suspected breaches of the Nigeria Data Protection Act (NDP Act) 2023.

In a press release issued on Monday, February 16, 2026, the NDPC revealed that Temu processes the personal data of approximately 12.7 million Nigerians, raising serious concerns about its data-handling practices. The probe, ordered by NDPC National Commissioner and CEO Dr. Vincent Olatunji, focuses on multiple potential violations, including:

• Online surveillance through excessive personal data processing
• Lack of transparency and accountability in data operations
• Failure to adhere to data minimisation principles
• Opaque cross-border data transfers
• Breaches of duty of care toward users

The announcement has sparked widespread reactions on social media, with many Nigerians questioning the selective focus on Temu—a platform praised for its affordable products and accessible shipping to Nigeria—while larger global players like Meta, Google (Chrome), and others that handle vast amounts of Nigerian user data appear untouched.

The investigation comes on the heels of the NDPC’s previous high-profile enforcement action in 2025, when it imposed a record fine of N766.2 million on MultiChoice Nigeria for similar violations, including unlawful cross-border data transfers and intrusive processing of subscriber information.

NDPC officials emphasized that the current approach prioritizes remediation to encourage compliance and business sustainability. However, they warned that failure to address identified issues could result in significant administrative fines—up to the greater of N10 million or 2% of annual gross revenue for major data controllers and processors.

Temu has not yet publicly responded to the allegations. The NDPC urged all data controllers and processors operating in Nigeria to strictly comply with the NDP Act, noting that third-party processors could face liability for failing to verify compliance by the entities they serve.

As Nigeria strengthens its data protection regime, this probe into one of the fastest-growing global e-commerce platforms signals the government’s increasing scrutiny of how international companies handle citizens’ personal information in the digital economy.

The NDPC assured the public that the investigation will be thorough, transparent, and guided by the principles of fairness, accountability, and protection of Nigerians’ privacy rights. Updates are expected as the probe progresses.