Nigeria’s data protection regulator has launched an investigation into the online trading platform Temu, suspected of not complying with national privacy legislation.
The Nigeria Data Protection Commission (NDPC) announced on Tuesday that it is examining the company's practices regarding the collection, use, and transfer of its users' personal data in Nigeria. The authorities are particularly interested in data transfers abroad, transparency obligations, and compliance with the principle of data minimization.
The investigation was ordered by the National Commissioner and Director General of the NDPC, Vincent Olatunji. He warned that any company found guilty of violations will face penalties under the Nigerian Data Protection Act of 2023.
According to the regulator, Temu processes data from approximately 12.7 million Nigerian users. Globally, the platform claims nearly 70 million daily active users.
Authorities are seeking to determine whether the company's data management practices comply with local requirements, particularly regarding the export of personal information outside of Nigerian territory.
The NDPC also noted that third-party companies tasked with processing data on behalf of other organizations can be held liable in the event of non-compliance.
Owned by PDD Holdings, Temu has experienced rapid expansion in Nigeria, offering low-priced products ranging from clothing to electronics through its mobile app. The company has not yet publicly responded to the investigation.
This procedure comes amid increasing scrutiny of digital giants. In 2023, the NDPC had already fined Multichoice Nigeria 766 million naira for failing to comply with data protection rules.
The outcome of this investigation could influence how international technology companies manage user data in Nigeria, one of Africa's most dynamic digital markets.
