Temu Faces NDPC Probe for Alleged Violation of Nigeria’s Data Protection Act
This investigation highlights the NDPC’s ongoing efforts to enforce data protection regulations in Nigeria and safeguard the privacy rights of users in the rapidly growing e-commerce sector.
The Nigeria Data Protection Commission (NDPC) has ordered an immediate investigation into the data processing activities of Temu, citing potential violations of the Nigeria Data Protection Act (NDP Act) 2023. The investigation was announced by NDPC National Commissioner/CEO Dr. Vincent Olatunji.
The probe was prompted by concerns over online surveillance practices, personal data processing, accountability, data minimization requirements, transparency, duty of care, and cross-border data transfers. Preliminary findings indicate that Temu, an e-commerce platform, processes personal information for approximately 12.7 million data subjects in Nigeria and serves 70 million daily active users globally.
Dr. Olatunji emphasized that data processors must ensure compliance with the NDP Act when handling personal data on behalf of data controllers, warning that failure to do so could result in legal liability under the law.
This investigation highlights the NDPC’s ongoing efforts to enforce data protection regulations in Nigeria and safeguard the privacy rights of users in the rapidly growing e-commerce sector.

