By Emmanuel Ogbodo
On July 19, the Federal Competition and Consumer Protection Commission (FCCPC) imposed a substantial $220 million fine on Meta Platforms Inc., owner of WhatsApp, Facebook, and Instagram, for multiple breaches of data privacy regulations. This hefty penalty follows just four months after a $10 million fine was levied against Binance for illegal transactions.
Background of the Fine
The fine against Meta was issued under the FCCP Act of 2018 and the Federal Competition and Consumer Protection (Administrative Penalties) Regulations 2020 (APR). This decision marks a significant regulatory action and reflects growing scrutiny of data privacy practices in Nigeria.
Acting FCCPC CEO Adamu Abdullahi announced the penalty, which stems from a joint investigation by the FCCPC and the Nigeria Data Protection Commission (NDPC). The inquiry, conducted from May 2021 to December 2023, scrutinized Meta’s data handling practices and privacy policies.
Why the Investigation Began
The FCCPC’s investigation was triggered by an order and notice to show cause (ONSC) issued in May 2021 to WhatsApp LLC and Meta Platforms Inc. The ONSC followed user complaints and preliminary evidence suggesting violations of the Federal Competition and Consumer Protection Act (FCCPA) and the Nigeria Data Protection Regulation (NDPR). The notice demanded that Meta justify their practices and explain why the FCCPC should not impose enforceable orders based on their findings.
Findings of the Investigation
After a comprehensive 38-month investigation, the FCCPC and NDPC concluded that Meta had improperly collected and shared data of Nigerian users on Facebook and WhatsApp without their consent, breaching Nigeria’s data protection laws (NDPA, Section 39). The probe also revealed potential discriminatory practices, where Nigerian users may have been treated unfairly compared to those in other regions.
The findings highlighted Meta’s misuse of its dominant market position, which led to the imposition of unfair privacy policies and unauthorized data handling practices. The FCCPC criticized Meta for repeatedly violating data protection regulations and engaging in abusive practices against Nigerian consumers.
Issuance of the Final Order
The FCCPC issued a final order after Meta failed to adequately address the commission’s concerns or provide satisfactory defenses. The final order addressed multiple issues, including unauthorized data transfers, cross-border storage violations, and discriminatory practices. It mandated that Meta comply with national laws and cease any exploitative practices affecting Nigerian consumers.
The $220 Million Penalty
The penalty of $220 million aligns with the FCCPA 2018 and the Administrative Penalties Regulations 2020. This significant fine underscores the FCCPC’s commitment to enforcing data protection laws and holding foreign companies accountable for regulatory breaches.
Can Meta Appeal?
Meta has announced intentions to appeal the fine. While a final order typically cannot be altered by the issuing agency, the company can challenge the order through legal avenues. Meta’s legal team will need to navigate the appeal process, seeking a potential reversal or modification of the penalty.
Implications of the Ruling
The FCCPC’s decision could have far-reaching implications for foreign companies operating in Nigeria. Should the fine stand, it will likely prompt tighter data privacy policies and greater compliance with Nigeria’s data protection laws among international firms. This ruling reinforces the FCCPC’s regulatory authority and signals a heightened focus on data privacy and consumer protection in Nigeria.
