NDPC Investigates Temu for Alleged Violation of Data Protection Act
Abuja, Nigeria – February 18, 2026
The (NDPC) has ordered an immediate investigation into the data processing activities of over alleged violations of the Nigeria Data Protection Act (NDP Act).
The directive was issued by the NDPC National Commissioner/CEO, , amid growing concerns about the platform’s compliance with Nigeria’s data protection framework.
In a statement released by , Head of Legal, Enforcement & Regulations at the Commission, the investigation was triggered by concerns surrounding online surveillance through personal data processing, accountability obligations, adherence to data minimisation principles, transparency requirements, duty of care, and cross-border data transfers.
According to preliminary findings, Temu operates as a global e-commerce platform processing the personal information of approximately 12.7 million data subjects in . Globally, the platform reportedly records about 70 million daily active users.
The Commission expressed particular concern about whether the company’s data collection and processing practices comply with the lawful basis, purpose limitation, and proportionality standards stipulated under the NDP Act. The NDPC also indicated that it would examine the platform’s mechanisms for obtaining valid consent, ensuring data security safeguards, and protecting the rights of Nigerian data subjects.
Dr Olatunji warned that data processors acting on behalf of data controllers must independently verify that such controllers comply with the NDP Act. He stressed that processors who engage in processing activities without conducting due diligence may themselves be held liable under the law.
“The Commission will not hesitate to invoke its enforcement powers where violations are established,” the statement noted, reaffirming the NDPC’s commitment to safeguarding the fundamental privacy rights of Nigerians in the digital economy.
The investigation marks one of the most significant regulatory actions involving a major international e-commerce platform under Nigeria’s evolving data protection regime.
