The Nigeria Data Protection Commission (NDPC) has initiated an inquiry into the operations of the global e-commerce platform Temu, citing potential breaches of the Nigeria Data Protection Act (NDP Act) 2023. This investigation stems from worries about how personal data is processed on the platform, particularly regarding online surveillance, transparency, accountability, duty of care, data minimization, and cross-border data transfers. Temu reportedly manages the personal information of approximately 12.7 million Nigerian users, amplifying the urgency of the inquiry as there are 70 million active users globally.

In a statement from Babatunde Bamigboye, the Head of Legal, Enforcement & Regulations at the NDPC, the commission highlighted the importance of compliance with the NDP Act among data processors. Cautioning about the risks faced by processors that do not ensure data controllers adhere to legal obligations, Dr. Vincent Olatunji, the National Commissioner and CEO of the NDPC, underscored potential liabilities under the Act for negligence or failure to verify compliance. This emphasizes a significant shift towards stricter oversight of data privacy in Nigeria's evolving digital economy.

The NDPC's actions signal a broader trend in Nigeria where authorities are increasingly scrutinizing the practices of digital platforms to protect user data. The growing awareness of data privacy issues among citizens, paired with regulatory pressures, suggests that companies like Temu may need to reassess their data governance strategies in Nigeria and ensure robust compliance mechanisms are in place. This inquiry not only reflects the NDPC's commitment to enforcing the NDP Act but also highlights the challenges that global e-commerce entities may face in navigating diverse regulatory landscapes.