NDPC Probes Temu Over Alleged Privacy Violations

Nigeria’s National Data Protection Commission (NDPC) has opened an investigation into e-commerce platform Temu over an alleged violation of the Nigeria Data Protection Act, involving the personal data of about 12.7 million users in Nigeria.

The commission confirmed the probe in a statement credited to Babatunde Bamigboye, who oversees legal, enforcement and regulation at the NDPC.

According to the NDPC, the investigation was triggered by concerns about online surveillance risks associated with personal data processing. The commission said it is focusing on issues such as accountability, data minimisation, transparency, duty of care, and cross-border data transfers.

The NDPC said its leadership, including Vincent Olatunji, ordered an immediate review of the platform’s data-processing activities after preliminary findings suggested the scale of personal data handled in Nigeria could be significant.

Cross-border data transfer is a major focus

The commission’s statement raised concerns about how data may be transferred outside Nigeria and whether such transfers comply with the requirements of the Nigeria Data Protection Act, 2023. NDPC officials said they are examining whether the platform’s practices align with the law’s standards on lawful processing and protection of Nigerians’ personal information.

Warning to third-party processors

Beyond the platform itself, the NDPC also issued a warning to other companies that process data on behalf of businesses. It said processors who handle personal data for data controllers without first confirming compliance with the Nigeria Data Protection Act may also face liability if violations are established.

Background on Temu’s growth

Temu entered the Nigerian market in late 2024 and quickly became visible through heavy marketing on social media and app stores. The platform launched in the United States in September 2022 and expanded rapidly, reaching more than 90 markets by 2025, with reports also citing tens of millions of daily active users globally.