Meta penalty reduced as Nigeria shifts from punishment to compliance reforms

THE Nigeria Data Protection Commission (NDPC) has clarified that the $32.8 million penalty imposed on Meta Platforms Inc. was not cancelled. Instead, it was reduced through a negotiated settlement that prioritises compliance obligations and public education on data protection.

The clarification follows reports suggesting that the fine had been entirely waived. The commission stressed that both parties agreed to a settlement framework that lowered the financial penalty, with Meta also expected to make certain payments to the Nigerian government. However, the exact figure of the payment has not been made public.

Penalty redirected into compliance and public awareness

Rather than focusing solely on financial sanctions, part of the penalty was converted into enforceable commitments aimed at strengthening Nigeria’s data protection ecosystem. The case stems from a 17-month investigation that began in February 2025, during which NDPC accused Meta Platforms Inc. of processing the personal data of more than 60 million Nigerians without valid consent. The commission also alleged unlawful use of the data for targeted advertising and cross-border transfers outside approved regulatory safeguards.

Initially, the NDPC issued eight corrective directives requiring Meta to adjust its data handling practices. The company challenged the fine in court, which led to extended negotiations between both parties. A confidential settlement was eventually signed on October 30, 2025 and later adopted as a consent judgment by the Federal High Court in Abuja on November 3, 2025.

READ ALSO: After hitting Meta with $220m fine, Nigerian govt warns of more penalties for tech firms

According to NDPC spokesperson Itunu Dosekun, the arrangement did not eliminate the penalty entirely. She explained that while a portion of the financial obligation was paid to the government, the remainder was addressed through joint initiatives between both parties. Between January and February 2026, Meta and the NDPC rolled out data privacy awareness campaigns on Facebook aimed at educating Nigerian users on the protection of personal information online.

Dosekun added that additional collaborative projects are still being discussed, including efforts to translate the Nigeria Data Protection Act into multiple local languages to expand public understanding. She noted that the commission’s approach goes beyond sanctions, stating that the goal is to encourage responsible business practices while safeguarding citizens’ privacy rights.

Transparency concerns and legal debate

Under the original enforcement order, Meta was required to halt certain data practices deemed non-compliant. However, several of these directives were reportedly softened or replaced with broader undertakings in the final settlement. Meta also agreed to cover legal costs incurred by the Nigerian government during the dispute.

The confidentiality surrounding the agreement for several months has triggered debate among legal and policy observers, with concerns raised about transparency in regulatory enforcement involving global technology companies.

Some data protection specialists argue that the outcome reflects weak regulatory pressure. They question whether the NDPC has the statutory authority to significantly reduce such a substantial penalty and warn that the settlement could undermine the credibility of the Nigeria Data Protection Act.

READ ALSO: How Meta, Google Ads enable unlicensed health product campaigns exploiting Africans online (III)

The Data Privacy Lawyers Association of Nigeria (DPLAN) has issued a pre-action notice to the commission and threatened legal action. The group is demanding full disclosure of the settlement process and restoration of the original $32.8 million penalty, with court proceedings expected in early 2026.

While negotiated settlements between regulators and multinational firms are not unusual globally, critics maintain that opaque agreements risk weakening enforcement standards. The controversy underscores the broader challenge facing regulators in emerging markets: balancing investment-friendly reforms with firm accountability for big tech platforms operating at scale.