Nigeria’s data regulator has opened a high-level investigation into the operations of Temu, following concerns about how the global online marketplace handles the personal information of users within the country.
The probe was initiated by the Nigeria Data Protection Commission (NDPC) after allegations surfaced that the platform may have breached key provisions of the Nigeria Data Protection (NDP) Act. Authorities say the review will focus on Temu’s data processing practices and whether they meet the legal standards required for platforms operating within Nigeria.
The commission’s National Commissioner and Chief Executive Officer, Dr Vincent Olatunji, personally ordered the investigation amid rising concerns over Temu’s handling of user data. Issues under scrutiny include online surveillance practices, gaps in accountability, possible failure to comply with data minimisation requirements, lack of transparency, insufficient duty of care, and concerns surrounding cross-border transfers of personal information.
Preliminary findings indicate the scale of the platform’s footprint in the country. According to the commission, Temu processes personal data belonging to an estimated 12.7 million data subjects in Nigeria, while the company reports roughly 70 million daily active users globally. Regulators say these figures highlight both the platform’s rapid growth and the potential impact of any regulatory violations.
In a public advisory, Dr Olatunji cautioned data processors working on behalf of controllers to carefully verify that their partners comply with the NDP Act. He warned that failure to carry out proper checks could expose processors themselves to direct liability under the law.
Temu Investigation Raises Consumer Data Security Concerns
The investigation was formally announced by Babatunde Bamigboye, the commission’s Head of Legal, Enforcement and Regulations, who reaffirmed the agency’s determination to protect citizens’ privacy rights in an increasingly digital environment.
Regulators say the move forms part of a broader enforcement campaign targeting data mismanagement across Nigeria’s rapidly expanding technology sector. In the past year alone, the commission reviewed more than 1,369 organisations for related infractions and conducted industry-wide compliance audits, particularly among fintech operators and other high-risk processors. Previous investigations have included scrutiny of the National Identity Management Commission over alleged privacy lapses, as well as data rights violations linked to Optasia.
Digital policy analysts say the Temu investigation signals stronger regulatory vigilance, especially toward foreign digital platforms expanding into Nigeria’s consumer market without fully aligning with local compliance requirements. “Cross-border transfers without safeguards pose real risks to data sovereignty,” noted one digital rights advocate, speaking anonymously.
For many Nigerian consumers attracted to Temu’s low-cost offerings, the probe raises fresh concerns about the safety of personal information, including payment data and browsing behaviour. The commission has urged users to stay alert for official updates and to report any suspicious activity linked to their accounts.
As the investigation continues, businesses across the e-commerce ecosystem are preparing for possible compliance checks. Regulators have indicated that organisations found in violation could face penalties ranging from financial sanctions to operational restrictions or mandatory data localisation measures.
The commission says it remains committed to enforcing compliance and protecting citizens’ personal information as data-driven commerce continues to expand across Nigeria.
Stay informed on the ongoing probe into Temu’s data practices and what it means for Nigerian users. Read full reports and get real-time updates on LouisaOlaniyi.com.ng, your trusted source for credible digital policy and tech regulation news.
