Nigeria quietly waives $32.8m fine on Meta in secret deal

In a move that has sparked fresh questions about regulatory strength, Nigeria has cancelled a $32.8 million fine it imposed on Meta Platforms Inc., the owner of Facebook and Instagram.

The Nigeria Data Protection Commission (NDPC) slapped the fine on Meta in February 2025 after a long investigation. Officials accused the company of handling personal data of over 60 million Nigerians without proper consent, using it for targeted ads, and moving data abroad without following the rules.

But behind closed doors, everything changed. On 30 October 2025, the NDPC and Meta signed a confidential settlement. Just days later, on 3 November 2025, a Federal High Court in Abuja turned that agreement into a formal consent judgment.

Under the deal, Nigeria dropped the entire $32.8 million penalty. Meta only agreed to pay the government’s legal costs. All major corrective orders were softened or removed, replaced with vague promises to handle data better in future.

Details of this settlement stayed hidden for months until recent reports brought them to light. Many data protection experts and lawyers now worry about what it means for Nigeria’s young data privacy system.

When asked about the settlement, Itunu Dosekun, NDPC spokesperson defended the move. He said it reflects the commission’s balanced approach: “We aim to promote businesses, not to spoil businesses… but also ensure organisations respect people’s privacy.”

He added that the focus is not only on collecting fines but on doing the right thing, such as creating initiatives and raising awareness about data protection. The NDPC sees the settlement as a way to achieve real compliance faster than long court fights.

However, the quiet waiver has damaged trust. Critics say it sends a weak signal, that major fines may not stick when challenged. It also raises questions about transparency. Why was the full agreement kept from the public? Does the NDPC have the power to fully cancel such penalties? Some lawyers have already threatened court action, arguing the deal undermines citizens’ privacy rights and the Data Protection Act.

For ordinary Nigerians who use Facebook and Instagram daily, the story matters. Their personal data fuels a huge advertising business. Strong rules are meant to protect them, but when penalties disappear without clear explanation, confidence in the watchdog drops.

This episode highlights a bigger challenge for many African countries: how to hold powerful global tech firms accountable while building credible institutions. Settlements are common worldwide, but when they heavily favour the company and lack openness, they can weaken future enforcement.

As debates continue, many are calling for more public reporting on such cases and clearer rules on when regulators can compromise.

Nigeria’s data protection journey is still new, this settlement may test how seriously the country takes digital rights in the years ahead.