TikTok, Truecaller Under Investigation for Alleged Data Privacy Breaches

The Nigeria Data Protection Commission (NDPC) has launched investigations into TikTok and Truecaller over alleged violations of data privacy laws. The move highlights the NDPC’s determination to enforce the Nigeria Data Protection Act (NDPA) and ensure compliance among local and international companies operating in the country.

During a press briefing in Abuja, Dr. Vincent Olatunji, the National Commissioner and CEO of the NDPC, confirmed the ongoing investigations, saying, “As we speak, we have even gone to the extent of investigating multinationals. We are currently investigating TikTok and Truecaller in the area of data privacy.”

Increased Compliance Through Enforcement

The NDPC’s efforts have significantly boosted compliance with data protection regulations in Nigeria. From a mere 4% compliance rate, the commission has successfully raised the figure to over 55%, thanks to enhanced enforcement measures and continuous engagement with stakeholders.

Rather than focusing solely on punitive actions, the NDPC promotes a collaborative approach to resolving data breaches. According to Olatunji, companies found to be non-compliant can work with the commission to rectify their lapses through remediation efforts. This approach aims to build a culture of data protection while still holding companies accountable when necessary.

A History of Data Privacy Concerns

This isn’t the first time the NDPC has scrutinised companies over data privacy issues. In June 2024, the commission fined seven Nigerian firms a total of ₦400 million for compromising user data. Furthermore, in September 2019, the National Information Technology Development Agency (NITDA) began investigating Truecaller for allegedly violating privacy rights.

TikTok has also faced global criticism over its data collection practices. In March 2024, the U.S. Federal Trade Commission (FTC) launched a separate investigation into the platform’s handling of data security and privacy.

What Lies Ahead

The NDPC’s latest actions serve as a stern reminder for companies operating within Nigeria to uphold data privacy standards. Non-compliance with the NDPA can result in hefty fines and severe damage to a company’s reputation.

To further enhance data protection efforts, the NDPC has partnered with the Federal Ministry of Youth Development to train 5,000 Nigerian youths as data protection professionals.