Manny Ita –
The Nigeria Data Protection Commission (NDPC) has officially opened an investigation into the operations of the global e-commerce platform Temu, citing potential violations of the Nigeria Data Protection (NDP) Act, 2023. The directive for the probe, issued on Monday, February 16, 2026, by the National Commissioner and CEO of the NDPC, Dr. Vincent Olatunji, centers on the platform’s handling of personal information belonging to approximately 12.7 million Nigerian users. This regulatory action follows preliminary findings that raised alarms over the scale and methods of the company’s data processing activities within the country.
The commission’s inquiry was prompted by several specific concerns, including allegations of online surveillance, inadequate transparency, and failure to meet data minimization requirements. According to a statement by the NDPC’s Head of Legal, Enforcement, and Regulations, Babatunde Bamigboye, the investigation will also scrutinize the platform’s “accountability, duty of care, and cross-border data transfers.” The regulator noted that with over 70 million daily active users globally, the sheer volume of data handled by Temu necessitates strict adherence to Nigerian privacy standards to prevent potential exploitation or unauthorized access to citizen information.
In addition to the primary investigation, the NDPC issued a stern warning to third-party data processors who manage information on behalf of controllers. The commission emphasized that any entity processing data for a platform like Temu without first verifying its compliance with the NDP Act could be held legally liable. This move is part of a broader effort by the federal government to secure Nigeria’s digital economy, following a recent partnership between the NDPC and the Nigerian Communications Commission (NCC) aimed at strengthening data integrity and consumer protection.
As of the evening of February 16, 2026, Temu has not released an official statement regarding the probe or the allegations of data violations. Regulatory experts suggest that the outcome of this investigation could have significant implications for international digital platforms operating in Nigeria, with potential consequences ranging from substantial administrative fines to operational restrictions. The NDPC has reiterated its commitment to ensuring that all organizations, regardless of their origin, respect the digital sovereignty and privacy rights of Nigerian data subjects.
