The Nigeria Data Protection Commission (NDPC) has launched an immediate investigation into the data processing activities of Temu, following complaints over alleged poor data management.
NDPC National Commissioner and Chief Executive Officer, Vincent Olatunji, confirmed that preliminary findings indicate that Temu processes personal information of approximately 12.7 million data subjects in Nigeria, alongside about 70 million daily active users.
Olatunji said the investigation was triggered by concerns surrounding online surveillance through personal data processing, accountability, data minimisation, transparency, duty of care, and cross-border data transfers.
“Preliminary investigations indicate that Temu is an e-commerce platform that processes personal information of approximately 12.7 million data subjects in Nigeria, with 70 million daily active users globally,” he said.
“Processors who handle personal data on behalf of data controllers must verify compliance with the NDPA. Failure to do so may result in liability under the law.”
He emphasised that the commission remains committed to safeguarding citizens’ personal data, warning that any organisation found in violation of the Nigeria Data Protection Act will face appropriate enforcement actions, including fines and sanctions.
The NDPC noted that its action aligns with its mandate to protect Nigerians’ privacy rights, enforce data protection laws, and ensure compliance by digital platforms operating within and across the country’s borders.
The commissioner further warned that processors who engage in processing activities on behalf of data controllers without verifying compliance with the Act may be held liable under the law.
