Full Breakdown
Nigeria Investigates Temu for Data Protection Violations
2/18/2026, 1:02:57 AM
Overview of the Investigation
The Nigeria Data Protection Commission (NDPC) has initiated a formal investigation into Temu, a Chinese e-commerce platform, over potential violations of the Nigeria Data Protection Act (NDP Act) of 2023. This inquiry arises amid growing concerns regarding the platform's data handling practices, particularly in relation to online surveillance, accountability, data minimization, transparency, and cross-border data transfers. The NDPC's investigation is particularly significant given that Temu reportedly processes personal information for approximately 12.7 million Nigerian users, contributing to its global user base of around 70 million daily active users.
Key Concerns Raised
The NDPC's investigation focuses on several critical areas:
- Online Surveillance: Allegations suggest that Temu may track user activities beyond what is necessary for its shopping services, raising privacy concerns.
- Data Minimization: Questions have been raised about whether Temu collects excessive data that is not relevant to its core functions as an e-commerce platform.
- Cross-Border Data Transfers: The NDPC is examining whether Temu has complied with regulations regarding the transfer of Nigerian users' data outside the country, particularly to China.
Dr. Vincent Olatunji, the NDPC's National Commissioner, emphasized that organizations processing data must ensure compliance with the NDP Act, warning that non-compliance could lead to significant penalties.
Temu's Response
In response to the investigation, Temu has stated its commitment to user privacy and data security. The company has pledged to cooperate fully with the NDPC and engage in constructive dialogue to address any concerns. Temu's statement highlighted its intention to comply with applicable laws and regulations regarding data practices.
Broader Implications
This investigation is part of a larger trend of increasing regulatory scrutiny of foreign digital platforms operating in Nigeria. The NDPC's actions signal a shift towards stricter enforcement of data protection laws, reflecting a growing emphasis on digital sovereignty and user privacy in the region. Previous fines imposed on companies like MultiChoice Nigeria for data breaches indicate the NDPC's commitment to holding organizations accountable for compliance.
Criticism & Opposition
Critics of Temu have raised concerns that the platform operates more like "spyware disguised as an e-commerce store," suggesting that its data collection practices may infringe on users' privacy rights. The NDPC's investigation is seen as a necessary step to ensure that users are informed about how their data is used and shared.
Conflicting Reports & Gaps
While the NDPC has outlined specific concerns regarding Temu's data practices, the company has not provided detailed information about the exact nature of the data it collects or how it is used. This lack of transparency has raised questions among stakeholders about the adequacy of Temu's privacy policies.
What's Next
The NDPC has not specified a timeline for concluding the investigation, but the outcome could set a significant precedent for how international digital platforms operate within Nigeria. As the investigation unfolds, it will be crucial to monitor the implications for data privacy compliance and the potential penalties that Temu may face if found in violation of the NDP Act.
