NDPC, Meta Engage in Dialogue to Resolve $220 Million Data Breach Dispute

The National Commissioner and CEO of the Nigeria Data Protection Commission (NDPC), Vincent Olatunji, announced on Tuesday that Nigeria and Meta, the parent company of WhatsApp, Facebook, and Instagram, are working to resolve a lingering data breach dispute through dialogue and collaboration. Speaking at a one-day intensive workshop for data protection officers (DPOs) in Abuja, Olatunji emphasized the NDPC’s preference for amicable solutions over escalation.

“Our new approach is partnership. We are working with them to see if we can resolve the issue. We don’t throw the baby out with the bathwater,” Olatunji said, highlighting the commission’s focus on addressing issues politically and constructively. He expressed confidence in reaching a resolution, stating, “I’m sure we’re going to resolve it.”

The dispute stems from a $220 million fine imposed by the Federal Competition and Consumer Protection Commission (FCCPC) on Meta in 2024 for multiple data privacy violations. The penalty followed a joint investigation by the FCCPC and NDPC into Meta’s conduct, privacy policies, and operations between May 2021 and December 2023. Meta appealed the fine, with WhatsApp threatening to exit Nigeria, and later faced another threat to shut down its Nigerian operations after the Competition and Consumer Protection Tribunal upheld the fine on April 25, 2025.

Olatunji’s remarks aim to ease public concerns, assuring that plans are in place to resolve the issue collaboratively. During the workshop, the NDPC also signed a Memorandum of Understanding (MoU) with Mastercard to strengthen data protection capacity in Nigeria. Olatunji noted the federal government’s commitment to increasing the number of certified DPOs with skills to manage data protection, highlighting Nigeria’s tech-savvy youth as key assets in this effort.

The workshop, he added, would benefit both Nigeria and Mastercard by fostering expertise and collaboration in data protection, aligning with the country’s push to enhance digital security and compliance.