The Nigeria Data Protection Commission (NDPC) has officially ordered an inquiry into the operations of Temu, a rapidly expanding global e-commerce platform, over potential violations of the Nigeria Data Protection Act (NDP Act) 2023.
The investigation was announced on Monday by the Head of Legal, Enforcement & Regulations at the commission, Babatunde Bamigboye, amid growing concerns over the platform’s data processing practices.
The inquiry specifically targets issues related to online surveillance, accountability, data minimization, transparency, duty of care, and cross-border data transfers.
The probe follows reports suggesting that Temu’s practices may compromise the privacy of its users. Preliminary findings by the commission indicate that the platform handles the personal data of approximately 12.7 million Nigerians.
Globally, the platform boasts over 70 million daily active users, raising the stakes for regulatory compliance. In a statement, the NDPC’s National Commissioner and CEO, Dr. Vincent Olatunji, issued a stern warning to data processors operating in the country.
“Processors who engage in processing activities on behalf of data controllers without verifying their compliance with the NDP Act may be liable under the NDP Act,” Olatunji cautioned.
Temu, which first launched in the United States in September 2022, entered the Nigerian market in late 2024.
Its arrival was marked by an aggressive marketing push across social media and mobile app stores, quickly becoming one of the most downloaded applications in the country due to its low-priced goods and targeted advertising.
However, its rapid growth, which is fueled by Nigeria’s youthful population and increasing smartphone usage, has now attracted the attention of regulators determined to ensure that personal information is managed in strict accordance with the law.
The NDPC’s move underscores a broader effort by Nigerian authorities to tighten the digital ecosystem and protect citizens from potential exploitation by global tech giants.
