The Nigeria Data Protection Commission (NDPC) has announced the commencement of an investigation into the data processing activities of global e-commerce platform, Temu, over alleged violations of the Nigeria Data Protection Act (NDP Act), 2023.
In a press release dated February 16, 2026, the NDPC disclosed that the National Commissioner/CEO, Dr. Vincent Olatunji, ordered an immediate probe into the company’s operations in Nigeria.
According to the Commission, the investigation was triggered by concerns relating to online surveillance through personal data processing, issues of accountability, compliance with data minimisation requirements, transparency obligations, duty of care, and cross-border data transfers.
Preliminary findings indicate that Temu processes the personal information of approximately 12.7 million Nigerian data subjects. The platform reportedly has about 70 million daily active users globally.
The NDPC also issued a warning to data processors who act on behalf of data controllers, stating that any entity engaging in processing activities without verifying compliance with the NDP Act may be held liable under the law.
The statement was signed by Babatunde Bamigboye, Esq., CDPRP, Head of Legal, Enforcement & Regulations at the NDPC.
The outcome of the investigation could have significant implications for data privacy compliance and the operations of international digital platforms within Nigeria.
