Connect with us

Technology

NDPC Seeks Dismissal of Meta’s Suit Against $32.8m Fine

Published

on

Meta Cambridge Analytica

By Adedapo Adesanya

The Nigeria Data Protection Commission (NDPC) has asked a Federal High Court (FHC) in Abuja to dismiss, in its entirety, a suit filed by Meta Platforms Incorporated challenging the fine it imposed on the organisation.

The NDPC had on February 18, 2025, imposed a remedial fee of $32.8 million and eight corrective orders against the social media giant, which operates Facebook, WhatsApp, and Instagram.

The American multinational technology company was alleged to have violated the fundamental privacy rights of its Nigerian users with respect to behavioural advertising on Facebook and Instagram.

Dissatisfied with the action, Meta Platforms, in a motion ex-parte dated and filed on February 26, dragged the regulatory agency to court as sole respondent.

In the motion ex-parte marked: FHC/ABJ/CS/355/2025 and moved by Mr Fred Onuofia (SAN) on March 4, Justice James Omotosho granted one of the two orders sought.

The judge had granted leave to Meta to commence proceedings by way of judicial-review seeking, inter alia, an order of certiorari quashing the compliance and enforcement orders dated February 18 issued by NDPC against the company, “and all other investigations, proceedings and actions taken by respondent against the applicant leading to the Final Orders.”

He, however, refused to grant Meta’s relief seeking a stay of the proceedings of all matters relating to the “Final Orders” issued by NDPC against it, pending the hearing and determination of the judicial review proceedings.

Instead, the judge made an order of accelerated hearing of the suit.

The firm, in its originating summons filed by the lead counsel, Mr Gbolahan Elias, wants the court to determine whether NDPC’s investigative process and ensuing compliance and enforcement orders (the Final Orders) issued on February 18 were invalid, null and void.

Meta, in its application dated and filed March 19, hinged the question on the allegation that the commission failed to provide it with adequate notice or an opportunity to be heard on alleged violations of the NDP Act prior to issuing the Final Orders.

Meta argued that such action violated its due process rights, including its right to fair hearing under Section 36 of the 1999 Constitution (as amended), among other reliefs.

But NDPC, in a preliminary objection to Meta’s suit, told the court that the suit is incompetent and the court lacks the jurisdiction to entertain same.

The regulatory agency, in its application dated April 10 and filed April 11 by its lawyer and the head, Alpha & Rohi Law Firm, Mr Adeola Adedipe (SAN), urged the court to either strike out or dismiss the case.

Mr Adedipe, in two grounds of argument, submitted that the originating summons filed by the company is incompetent for non-compliance with the mandatory provision of Order 34 Rule 6(1) of the FHC (Civil Procedure) Rules, 2019.

He also argued that the suit, as presently constituted, is grossly incompetent and academic, the reliefs sought therein, not being capable of activating the jurisdiction of the court.

“The suit is liable to be struck out/dismissed, in limine,” Mr Adedipe argued.

The NDPC, in the affidavit attached to the preliminary objection, stated that by an ex-parte motion, Meta Inc. filed the case.

The commission said that the company had filed the suit, seeking leave to apply for judicial review against the decision of the respondent taken on February 18.

It averred that there was a statement made pursuant to Order 34 of the Rules of the court, supporting the said application, containing the company’s two reliefs.

It said the court granted permission on March 4 for Meta to commence the proceeding, by way of judicial review.

According to the respondent, the originating summons filed by the plaintiff was commenced on 19th March, 2025, 15 days after leave was granted for the judicial review proceedings to be commenced.

NDPC, however, contended that the reliefs contained in the originating summons were completely different from the reliefs contained in the statement filed to support the ex-parte application for judicial review.

The commission also said it would be in the interest of justice for its objection to be sustained.

Also, in a counter affidavit deposed to by NDPC ‘s staff, Mr Osunleye Olatubosun, in opposition to the originating summons filed by Meta on March 19, he said the suit was brought under the judicial review procedure, primarily, to contest the decision of his office against Meta.

Mr Olatubosun averred that in the NDPC‘s decision, Meta was sanctioned after a protracted and thorough process of investigation.

He said the investigative power of the commission was activated by a petition written by an organisation, the Personal Data Protection Awareness Initiative (PDPAI).

The PDPAI had alleged that the company breached the data protection rights of users of Facebook and Instagram.

He averred that in the said petition, the plaintiff was alleged to be engaging in behavioural advertising without obtaining explicit consent of data subjects (users).

He said compelling evidence were provided in support of the petition, revealing Meta’s private policy showing that it conducted behavioural advertising, without obtaining consent from the data subjects.

Mr Olatubosun said during investigation, NDPC drew the company’s attention to some very disturbing violations in this regard, especially as to non-consensual data processing activities.

He said these included the disclosure of sensitive personal data of minors relating to their sex lives; sensitive personal data of minors involving drug use; and sensitive personal data of minor pupils in school, involving erotic dancing.

He said it also revealed sponsored advertisements on gambling, involving the manipulated personal data of a female journalist on TVC; sponsored advertisement on gambling involving the manipulated personal data of a male journalist on Channels TV; and manipulated personal data of public figures, conspiring to commit a felony; explicit video of a woman delivering a child, with her genitals in full display, etc.

He said Meta was, therefore, found in breach of certain provisions of the Nigeria Data Protection (NDP) Act, and that its promotion of debasing images outside the expectation of concerned data subjects offended the principles of fairness, lawfulness, transparency, accountability and duty of care.

Besides, the officer said failure of the company to file a compliance audit with the commission for the year 2022, was a breach of the NDP Act.

He equally said that cross border transfer of data by Meta, contravened mandatory requirements under the NDP Act.

Mr Olatubosun, who said that it was wrong for the plaintiff to process the data of its non-users of it platforms, added that Meta’s privacy policy violates relevant provisions of the NDP Act.

Against these development, the officer said the commission ordered the firm to, henceforth, “seek express consent of data subjects in Nigeria, where their personal data for behavioural advertising will be process.

“Carry out Data Processing Impact Assessment, taking into account the democratic development of Nigeria; update its privacy policy; cease and desist from transferring data out of Nigeria without approval of the commission, in line with the NDP Act.

“Create an appropriate icon link for educative videos, on the dangers of manipulative, unlawful and unfair data processing; put in place sufficient measures for the protection of data privacy on its platforms; and payment of 32, 800, 000 USD.”

Mr Olatubosun said that the case lacks merit, praying the court to dismiss it.

Meanwhile, other reliefs sought by Meta in the main suit, include whether NDPC’s initiation of its investigation, based on a petition submitted by an organisation, rather than on a complaint filed by a “data subject” (as defined under Section 65 of NDPA), invalidates the investigation and the Final Orders.

It also prayed the court for an order of certiorari, quashing the investigation, all proceedings constituted thereby, as well as the ensuing Final Orders issued by the commission against it.

It equally sought an order of injunction restraining NDPC from enforcing or taking steps to enforce any or all of the orders and/or intimidating, harassing or coercing the applicant to pay the purported remedial fee as contained in the Final Orders.

However, Meta, in a motion on notice filed on April 23, sought to amend its statement attached to the ex-parte application, having seen through the notice of preliminary objection which was filed by Mr Adeola Adedipe, SAN, on behalf of the commission.

Mr Onuofia while adopting all their processes, said the motion sought an order granting leave to the company to amend its statement pursuant to Order 34, Rule 3(2)(a) of the FHC rules.

He said it also sought an order deeming the amended statement, which had already been filed and served on NDPC as having been properly filed and served.

Giving grounds why his application should be grated, Mr Onuofia said on March 4, the court heard and granted their motion ex-parte for leave.

He said, thereafter, Meta filed it originating summons on March 19.

The lawyer, however, told the judge that the firm sought to amend the wording of the reliefs and grounds set out in the statement to replicate the wording used in the originating summons.

He said the decision was to ensure efficiency and the full and fair hearing of the issues arising in the originating summons.

According to him, the proposed amended statement highlights the amendments that the applicant seeks permission to make to the statement.

Mr Onuofia said the requested amendment would not cause any injustice to NDPC.

On his part, Mr Adedipe opposed Mr Onuofia’s prayer seeking an amendment, urging the court to dismiss the application.

The senior counsel told the court that a counter affidavit was filed on May 2 in opposition to the motion and argued that the application was presumptuous and misleading.

He submitted that an amendment of a process is not as of right, but entirely at the discretion of the court, where such is practicable and lawful to do so.

Justice Omotosho adjourned the matter until October 3 for consolidated ruling on the preliminary objection and motion to amend.

Adedapo Adesanya is a journalist, polymath, and connoisseur of everything art. When he is not writing, he has his nose buried in one of the many books or articles he has bookmarked or simply listening to good music with a bottle of beer or wine. He supports the greatest club in the world, Manchester United F.C.

Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Technology

Telco Ownership Changes Above 10% Now Subject to NCC Approval

Published

on

NCC

By Adedapo Adesanya

The Nigerian Communications Commission (NCC) and the Corporate Affairs Commission (CAC) have introduced a new regulatory requirement mandating prior approval for significant changes in the ownership structure of telecommunications companies operating in Nigeria.

This was contained in a statement jointly signed by the Director of Public Affairs at the NCC, Mrs Nnenna Ukoha and Head of Public Affairs at the Corporate Affairs Commission, Mr Rasheed Mahe.

According to a joint press release issued by the two agencies, the directive, which takes immediate effect, requires all licensed telecom operators seeking to transfer ownership or control of shares amounting to 10 per cent or more of their total share capital to first obtain a Letter of No Objection from the NCC before such transactions can be registered by the CAC.

The statement reads in part, “The directive, which takes immediate effect, requires all licensed communications companies seeking to transfer ownership or control of shares amounting to 10 per cent or more of their total share capital to obtain a Letter of No Objection from the NCC before such transactions can be registered with the CAC.

“The requirement is in line with the provisions of Section 90 of the Nigerian Communications Act 2003, Regulation 28(2) of the Competition Practices Regulations 2007, and Regulation 42 of the Licensing Regulations 2019, which empower the NCC to monitor transactions involving licensees and ensure fair competition within the sector.

“Under the new arrangement, the CAC will only process and register requests for changes in shareholding structures of telecommunications companies where the transaction involves 10 per cent or more of the company’s shares and is accompanied by evidence of prior approval from the NCC.

“According to the two regulatory agencies, the measure is aimed at strengthening oversight of significant ownership changes, preventing anti-competitive practices, and preserving a fair and competitive communications market. It is also expected to enhance transparency, boost investor confidence, provide greater regulatory certainty, and support the long-term stability and sustainability of Nigeria’s telecommunications industry.

The NCC and CAC reaffirmed their commitment to fostering a transparent, stable, and investor-friendly business environment. Both agencies pledged continued collaboration to promote fair market practices, strengthen regulatory compliance, and ensure the orderly development of Nigeria’s communications sector.”

Continue Reading

Technology

Rising Cyber Threats Could Undermine Business Sustainability, Profitability—ISSAN

Published

on

David Isiavwe ISSAN President

By Modupe Gbadeyanka

The relevant stakeholders have been urged to take urgent action to curb the rising sophistication of cyber threats, which could undermine business sustainability and profitability.

This call was made by the Information Security Society of Africa – Nigeria (ISSAN) during its monthly meeting held in collaboration with MAXUT Consulting.

The group noted that identity theft, mobile fraud, ransomware, and social engineering attacks are threats to organisations, especially those who may struggle to protect information assets, maintain operational resilience, and address vulnerabilities before they can be exploited.

The president of ISSAN, Mr David Isiavwe, who doubles as the Executive Director for Risk Management at Nova Bank, stressed that cybercriminals are deploying increasingly sophisticated attack methods targeting individuals, businesses, critical national infrastructure, and strategic assets.

Among the threats highlighted were identity theft, Business Email Compromise (BEC), phishing, ransomware, WhatsApp account hijacking, Distributed Denial-of-Service (DDoS) attacks, payment card fraud, cryptocurrency-related attacks, and other forms of social engineering.

According to him, the increasing frequency and sophistication of cyberattacks mean cybersecurity can no longer be viewed solely as an IT issue but as a critical business and national security priority.

To address these challenges, he urged organisations to adopt proactive risk management practices, implement continuous monitoring systems, promptly address vulnerabilities, and invest in regular cybersecurity awareness programmes for employees and customers.

Also, the importance of leveraging emerging technologies such as Artificial Intelligence (AI), Machine Learning (ML), and automation to enhance threat detection and response capabilities was emphasised.

“No organisation can successfully confront today’s cyber threats in isolation. Information sharing, collaboration, and collective vigilance remain essential to protecting our digital ecosystem and safeguarding public trust,” the ISSAN leader said at the event, which featured a technical presentation titled, Confronting the New Mobile Threat Landscape: Beyond User Authentication.

ISSAN reaffirmed its commitment to promoting cybersecurity awareness, capacity building, information sharing, and industry collaboration to strengthen Nigeria’s cyber resilience and support a secure digital economy.

Continue Reading

Technology

Zoho Launches Nathu La Server

Published

on

Zoho Nathu La Server

By Modupe Gbadeyanka

A designed-in-house server known as Nathu La has been launched by a global technology company, Zoho Corporation.

Nathu La is engineered with hardware-rooted security at every layer of the stack. Its indigenous IP-driven approach reduces dependency on external entities for security audits, firmware updates, and licensing continuity.

The solution aligns with open-source software principles and reflects Zoho’s broader commitment to building sustainable, secure, and scalable digital infrastructure. It also supports the growing global focus on digital sovereignty, local innovation ecosystems, and high-performance computing capabilities.

The platform was introduced by the company as part of a pivotal step in its journey towards building its full technology stack, from the hardware layer to software applications.

With Nathu La, Zoho has achieved equivalent performance with 12-18 per cent lower power consumption and 20-30 per cent lower total cost of ownership (TCO), thereby reducing inference costs.

The Nathu La server, comprising Intel® Xeon® 6 processors, was developed collaboratively with Intel, leveraging their enablement capabilities and technical expertise.

The design philosophy behind Nathu La is rooted in the Open Compute Project (OCP), emphasising modularity, thermal efficiency, and ease of maintenance. This enables Zoho’s data centres to significantly reduce total cost of ownership and power consumption.

Zoho plans to host its applications on the Nathu La server platform, enabling the company to optimise the full software-hardware stack for its specific workloads, reduce costs, improve performance, and strengthen data governance for its global customers. This will also help bring down inference costs for Zoho’s AI usage.

The Nathu La server motherboard and chassis platform is the result of five years of R&D across hardware, firmware, and systems management. Based on Intel® Xeon® 6 Processors, the server is designed to optimise performance for virtualisation (VM), High Performance Computing (HPC), AI inference, and storage applications. This results in improved performance of Zoho applications for end users.

The server features customised power delivery subsystems, an in-house DC-SCM (Data Centre Secure Control Module) design, and modular chassis options compatible with diverse end-user environments, offering flexibility across deployment types.

All modular components – including the DC-SCM and NIC (Network Interface Card) – were designed in-house by Zoho’s hardware engineering team and assembled through electronics manufacturing partners, enabling tighter integration and quality control across the platform. Over five patents have been filed covering advanced thermal management and cost-optimised server architecture designs.

“Zoho Corporation has invested in building its own technology stack from the ground up over the last three decades. The Nathu La server launch is in line with that goal.

“With our strategy of using contextual, right-sized models, running on our own platform, on our own servers, in our own data centres, we are compounding the benefits accrued from owning and operating our entire technology stack. This ensures that our solutions are more sustainable and accessible for businesses.

“These long-term R&D investments we are making at every layer of the stack are aimed at delivering customer value,” the Country Head for Zoho Nigeria, Mr Kehinde Ogundare, stated.

In 2020, Zoho established a small R&D team in Nagpur, a Tier 2 town in India, focused on projects such as server design and systems engineering.

Members of the Nathu La R&D team include hires from SETU – short for Students’ Engagement for Transformative Upskilling – an initiative designed to build a pipeline of industry-ready engineers, with a focus on advanced learning in Electronics System Design and Manufacturing (ESDM).

Continue Reading

Trending