Connect with us

E-Business

NDPC Asks Court  to Dismiss Meta’s Suit Challenging $32.8m Fine

Published

on

Kindly share this post

Nigeria Data Protection Commission (NDPC) has prayed the Federal High Court (FHC) in Abuja to dismiss, in its entirety, a suit filed by Meta Platforms, Inc. challenging the sanctions imposed on it.

NDPC Asks Court  to Dismiss Meta’s Suit Challenging $32.8m Fine

The NDPC had, on Feb. 18, imposed both a remedial fee of 32,800,000 million US dollars and eight corrective orders against Meta Inc.

The American multinational technology company was alleged to have violated the fundamental privacy rights of its Nigerian users with respect to behavioural advertising on Facebook and Instagram.

Dissatisfied with the action, Meta Platforms Inc., in a motion ex-parte dated and filed on Feb. 26, dragged the regulatory agency to court as sole respondent.

In the motion ex-parte marked: FHC/ABJ/CS/355/2025 and moved by Fred Onuofia, SAN, on March 4, Justice James Omotosho granted one of the two orders sought.

The judge had granted leave to Meta to commence proceedings by way of judicial-review seeking, inter alia, an order of certiorari quashing the compliance and enforcement orders dated Feb. 18 issued by NDPC against the company, “and all other investigations, proceedings and actions taken by respondent against the applicant leading to the ‘Final Orders.’”

He, however, refused to grant Meta’s relief seeking a stay of the proceedings of all matters relating to the “Final Orders” issued by NDPC against it, pending the hearing and determination of the judicial review proceedings.

Instead, the judge made an order of accelerated hearing of the suit.

The firm, in its originating summons filed by Prof. Gbolahan Elias, SAN, lead counsel,  wants the court to determine whether NDPC’s investigative process and ensuing compliance and enforcement orders (the Final Orders) issued on Feb. 18 were invalid, null and void.

Meta, in its application dated and filed March 19, hinged the question on the allegation that the commission failed to provide it with adequate notice or an opportunity to be heard on alleged violations of the NDP Act prior to issuing the “Final Orders.”

Meta argued that such action violated its due process rights, including its right to fair hearing under Section 36 of the 1999 Constitution (as amended), among other reliefs.

But NDPC, in a preliminary objection to Meta’s suit, told the court that the suit is incompetent and the court lacks the jurisdiction to entertain same.

The regulatory agency, in its application dated April 10 and filed April 11 by Adeola Adedipe, SAN, its lawyer and the head, ALPHA & ROHI Law Firm, urged the court to either strike out or dismiss the case.

Adedipe, in two grounds of argument, submitted that the originating summons filed by the company is incompetent for non-compliance with the mandatory provision of Order 34 Rule 6(1) of the FHC (Civil Procedure) Rules, 2019.

Quoting the provision, the lawyer said: “No ground shall be relied upon or any relief sought at the hearing, except the grounds and reliefs sought in the statement.”

He also argued that the suit, as presently constituted, is grossly incompetent and academic, the reliefs sought therein, not being capable of activating the jurisdiction of the court.

“The suit is liable to be struck out/dismissed, in limine,” Adedipe argued.

The NDPC, in the affidavit attached to the preliminary objection, stated that by an ex-parte motion, Meta Inc. filed the case.

The commission said that the company had filed the suit, seeking leave to apply for judicial review against the decision of the respondent taken on Feb. 18.

It averred that there was a statement made pursuant to Order 34 of the Rules of the court, supporting the said application, containing the company’s two reliefs.

It said the court granted permission on March 4 for Meta to commence the proceeding, by way of judicial review.

According to the respondent, the originating summons filed by the plaintiff was commenced on 19th March, 2025, 15 days after leave was granted for the judicial review proceedings to be commenced.

NDPC, however, contended that the reliefs contained in the originating summons were completely different from the reliefs contained in the statement filed to support the ex-parte application for judicial review.

It said it believes that this error on the part of Meta was fundamental and “the defendant/applicant (NDPC) does not intend to waive its right to object, in this regard.”

“The defendant/applicant does not intend to waive its rights in challenging these fundamental errors, which are fatal to this proceeding and jurisdiction of the court.”

The commission said it would be in the interest of justice for its objection to be sustained.

Also, in a counter affidavit deposed to by Osunleye Olatubosun, NDPC ‘s staff,  in opposition to the originating summons filed by Meta on March 19, he said the suit was brought under the judicial review procedure, primarily, to contest the decision of his office against Meta.

Olatubosun averred that in the NDPC ‘s decision, Meta was sanctioned after a protracted and thorough process of investigation.

He said the investigative power of the commission was activated by a petition written by an organisation, the Personal Data Protection Awareness Initiative (PDPAI).

The PDPAI had alleged that the company breached the data protection rights of users of Facebook and Instagram.

He averred that in the said petition, the plaintiff was alleged to be engaging in behavioural advertising without obtaining explicit consent of data subjects (users).

He said compelling evidence were provided in support of the petition, revealing Meta’s private policy showing that it conducted behavioural advertising, without obtaining consent from the data subjects.

The officer, in the counter affidavit dated and filed on April 30, described behavioural advertisement as “a special form of targeted advertising, where consumers are shown advertisements based on their behavioural data.”

He said it is a kind of advertising which collects and tracks individual sensitive information, without their knowledge or consent, to either share with third parties, or to decide specialised advertisements to be shown to the consumers.

Olatubosun said during investigation, NDPC drew the company’s attention to some very disturbing violations in this regard, especially as to non-consensual data processing activities.

He said these included the disclosure of sensitive personal data of minors relating to their sex lives; sensitive personal data of minors involving drug use; and sensitive personal data of minor pupils in school, involving erotic dancing.

He said it also revealed sponsored advertisements on gambling, involving the manipulated personal data of a female journalist on TVC; sponsored advertisement on gambling involving the manipulated personal data of a male journalist on Channels; and manipulated personal data of public figures, conspiring to commit a felony; explicit video of a woman delivering a child, with her genitals in full display, etc.

He said Meta was, therefore, found in breach of certain provisions of the Nigeria Data Protection (NDP) Act, and that its promotion of debasing images outside the expectation of concerned data subjects offended the principles of fairness, lawfulness, transparency, accountability and duty of care.

Besides, the officer said failure of the company to file a compliance audit with the commission for the year 2022, was a breach of the NDP Act.

He equally said that cross border transfer of data by Meta, contravened mandatory requirements under the NDP Act.

Olatubosun, who said that it was wrong for the plaintiff to process the data of its non-users of it platforms, added that Meta’s privacy policy violates relevant provisions of the NDP Act.

Against these development, the officer said the commission ordered the firm to, henceforth, “seek express consent of data subjects in Nigeria, where their personal data for behavioural advertising will be process.

“Carry out Data Processing Impact Assessment, taking into account the democratic development of Nigeria; update its privacy policy; cease and desist from transferring data out of Nigeria without approval of the commission, in line with the NDP Act.

“Create an appropriate icon link for educative videos, on the dangers of manipulative, unlawful and unfair data processing; put in place sufficient measures for the protection of data privacy on its platforms; and payment of 32, 800, 000 USD.”

Olatubosun said that the case lacks merit, praying the court to dismiss it.

Meanwhile, other reliefs sought by Meta in the main suit, include whether NDPC’s initiation of its investigation, based on a petition submitted by an organisation, rather than on a complaint filed by a “data subject” (as defined under Section 65 of NDPA), invalidates the investigation and the “Final Orders.”

It also prayed the court for an order of certiorari, quashing the investigation, all proceedings constituted thereby, as well as the ensuing “Final Orders” issued by the commission against it.

It equally sought an order of injunction restraining NDPC from enforcing or taking steps to enforce any or all of the orders and/or intimidating, harassing or coercing the applicant to pay the purported remedial fee as contained in the “Final Orders.”

However, Meta, in a motion on notice filed on April 23, sought to amend its statement attached to the ex-parte application, having seen through the notice of preliminary objection which was filed by Adeola Adedipe, SAN, on behalf of the commission.

Onuofia, SAN, while adopting all their processes, said the motion sought an order granting leave to the company to amend its statement pursuant to Order 34, Rule 3(2)(a) of the FHC rules.

He said it also sought an order deeming the amended statement, which had already been filed and served on NDPC as having been properly filed and served.

Giving grounds why his application should be grated, Onuofia said on March 4, the court heard and granted their motion ex-parte for leave.

He said, thereafter, Meta filed it originating summons on March 19.

The lawyer, however, told the judge that the firm sought to amend the wording of the reliefs and grounds set out in the statement to replicate the wording used in the originating summons.

He said the decision was to ensure efficiency and the full and fair hearing of the issues arising in the originating summons.

According to him, the proposed amended statement highlights the amendments that the applicant seeks permission to make to the statement.

Onuofia said the requested amendment would not cause any injustice to NDPC.

But Adedipe vehemently opposed Onuofia’s prayer seeking an amendment, urging the court to dismiss the application.

The senior counsel told the court that a counter affidavit was filed on May 2 in opposition to the motion.

He argued that the application was presumptuous and misleading.

He submitted that an amendment of a process is not as of right, but entirely at the discretion of the court, where such is practicable and lawful to do so.

Adedipe argued that the reliefs sought in a statement attached to a judicial review procedure cannot be amended, except the grounds for which the reliefs are premised.

He said the reliefs contained in the statement, are such that must be reproduced in the originating process filed, after leave had been granted for judicial review.

According to him, the applicant seeks to amend the reliefs set out in the unattached predicate “statement.”

“There can be no amendment to incompetent reliefs set out in the statement,” he said.

The lawyer argued that to concede that the reliefs contained in the predicate statement should be amended, was to make a mockery of the entire proceedings as the court had already granted the said reliefs contained in Exhibit A.

‘This is suggestive that the court already determined the substantive suit in favour of the applicant, ex-parte.

“The application before this court is not for ‘substitution’ of the reliefs, but amendment of orders or reliefs which had already been granted in the ex-parte application,” he argued.

He added that what Meta sought to do was to substitute the reliefs, under the guise of amendment.

He said the application contradicted Order 34(6)(1) of the FHC (Civil Procedure) Rules, 2019.

“It projects a lot of incongruity,” he said, arguing that there was no provision under the Rules to amend reliefs in the statement; but that only grounds of the reliefs can be amended.

Justice James Omotosho adjourned the matter until Oct. 3 for consolidated ruling on the preliminary objection and motion to amend.

 


Kindly share this post

Ebere Melum-Nwogbo is a trained and practicing journalist. She is passionate about ICT and business journalism. She has over a decade experience spanning money and capital market as well as information technology

E-Business

PwC Reveals AI Scaling Gap Slows Africa’s Digital Transformation

Published

on

Kindly share this post

African CEOs continue to trail their global counterparts in deploying artificial intelligence (AI) across business functions, as they remain stuck in experimental AI phases, finding it difficult to scale initiatives into enterprise-wide deployments.

This is one of the key findings of PwC’s 29th Global CEO Survey: Africa perspective. It found that more than 150 CEOs in Africa who participated in the survey demonstrate strong operational resilience and reinvention as they navigate currency fluctuations, political uncertainty, infrastructure constraints and supply chain disruptions.

It highlights a slower pace of digital transformation that could limit long-term competitiveness in Africa. While awareness and early adoption of AI are growing, enterprise-wide deployment remains limited, according to the survey.

The survey was conducted from 30 September to 10 November 2025 and surveyed 4 454 CEOs across 95 countries, including Africa.

Skills shortages, fragmented data governance, underdeveloped cloud infrastructure and risk-averse investment strategies are preventing African organisations from moving beyond pilot projects into full-scale AI-driven transformation, it finds.

“AI adoption in Africa is real, but scaling it across the enterprise remains a challenge,” says Christiaan Nel, AI Africa leader at PwC South Africa. “Caution must be balanced with urgency − those investing modestly today risk falling behind competitors scaling rapidly.”

 Finding their way

Despite these challenges, African CEOs demonstrate strong operational resilience. The survey shows that 81% are optimistic about improving economic conditions, well above the global average of 65%, while 47% are confident about revenue growth over the next year.

The survey underscores that AI adoption highlights a broader reinvention gap. Only 41% of CEOs have clear AI roadmaps, and 37% formalised responsible AI processes. Skills availability remains a major barrier, with just 37% confident in sourcing and retaining talent for AI initiatives.

PwC research shows that when AI is implemented effectively, African companies experience tangible benefits: 56% report increased employee productivity, 53% gain executive time, 23% see revenue growth, and 25% achieve cost reductions. This confirms that AI can drive efficiency and transformation, but only if infrastructure, governance and investment keep pace, notes the study.

Vikas Sharma, Africa cyber leader at PwC Mauritius, explains: “The challenge is structural. Fragmented cloud environments, unclear data governance and underdeveloped cyber security make scaling AI difficult. Without these foundations, AI initiatives remain tactical rather than transformational.”

Beyond AI, CEOs are using technology to reinvent products, reach new customers and modernise operations. PwC highlights that cloud, analytics and digital frameworks are essential enablers for enterprise-wide AI, helping leaders move from experimentation to transformation.

Importantly, African organisations are using technology to augment rather than replace employees, maintaining workforce stability while improving productivity, it states.

Ambition versus execution

Although 55% of African CEOs consider innovation critical to strategy, only 13% are willing to take high risks in innovation projects.

Underlying capabilities reveal the challenge: just 16% operate dedicated innovation centres, 25% have processes to stop underperforming research and development, and 29% rapidly test ideas with customers.

Lullu Krugel, chief economist and ESG leader at PwC South Africa, adds: “The leaders who build enduring businesses protect their core while creating the future. Operational strength alone is not enough; transformation must be bolder.”

Investment restraint is evident: 59% of respondents report little to no change in IT spending, and only 8% are willing to make large investments despite geopolitical uncertainty. Confidence in acquisitions is lower than the global average, with 40% planning growth through acquisition, compared to 46% globally.

Yet diversification offers a competitive-edge. Nearly half of African CEOs have entered new sectors through services and product offerings in the past five years, generating 24% of revenue from these ventures. Technology leads planned expansion efforts at 17%, followed by real estate, retail and transport/logistics.

PwC concludes that Africa’s CEOs have the ambition and resilience but must move from operational excellence to strategic reinvention. This requires embracing risk as a catalyst for transformation, strengthening digital infrastructure, investing in change leadership and aligning AI adoption with enterprise-wide strategy.

Hannelie Gilmour, consulting and transformation platform leader at PwC South Africa, concludes: “Africa is uniquely positioned to leapfrog global peers. Tomorrow’s stability comes from today’s innovation. CEOs who act decisively will shape the continent’s next chapter.”

 


Kindly share this post
Continue Reading

E-Business

Firm Reviews the Evolution of Phishing Threats in 2025

Published

on

Kindly share this post

A new Kaspersky review reveals how cybercriminals revived and refined phishing techniques to target individuals and businesses in 2025, including calendar-based attacks, voice message deceptions and sophisticated multi-factor authentication (MFA) bypass schemes.

The findings emphasise the critical need for user vigilance, employee training and advanced email protection solutions to counter these persistent threats moving forward.

Calendar-based phishing targets office workers

A tactic originally from the late 2010s, calendar-based phishing, has reemerged with a focus on B2B environments. Attackers send emails with calendar event invitations, often containing no body text, hiding malicious links in the event description.

When opened, the event auto-adds to the user’s calendar, with reminders urging them to click links leading to fake login pages, such as those mimicking Microsoft.

Previously aimed at Google Calendar users in mass campaigns, this method now targets office employees. Organisations should conduct regular phishing awareness training, such as simulated attack workshops, to teach employees to verify unexpected calendar invites.

Voice message phishing with CAPTCHA evasion

Phishers are deploying minimalist emails posing as voice message notifications, containing sparse text and a link to a basic landing page. Clicking the link triggers a chain of CAPTCHA verifications to bypass security bots, ultimately directing users to a fraudulent Google login page that validates email addresses and captures credentials.

This multi-layered deception highlights the need for employee training programmes, such as interactive modules on recognising suspicious links and advanced email server protection solutions like Kaspersky SecureMail, which detect and block such covert tactics.

MFA bypass via fake cloud service logins

These sophisticated phishing campaigns are targeting multi-factor authentication (MFA) by mimicking services like pCloud (a cloud storage provider that offers encrypted file storage, sharing and backup services).

These emails, disguised as neutral support follow-ups, lead to fake login pages on lookalike domains (e.g., pcloud.online). The pages interact with the real pCloud service via API, validating emails and prompting for OTP codes and passwords, granting attackers account access upon successful login.

To counter this, organisations should implement mandatory cybersecurity training and deploy email security solutions like Kaspersky Security for Mail Servers, which flags fraudulent domains and API-driven attacks.

“With phishing schemes growing more deceptive, Kaspersky urges users to treat unusual email attachments, like password-protected PDFs or QR codes, with caution and verify website URLs before entering any credentials.

“Organisations should adopt comprehensive training programmes, which includes real-world simulations and best practices for spotting phishing attempts. Additionally, deploying robust email server protection solutions ensures real-time detection and blocking of advanced phishing tactics,” comments Roman Dedenok, Anti-Spam Expert at Kaspersky.

 


Kindly share this post
Continue Reading

E-Business

NDPC Commits to Balancing Data Privacy, Protection Information

Published

on

Kindly share this post

Nigerian Data Protection Commission (NDPC), has expressed its commitment to balance information around data privacy and protection.

NDPC Commits to Balancing Data Privacy, Protection Information

Dr. Vincent Olatunji, national commissioner, NDPC, stated this in Abuja, at the National Data Privacy Summit with the theme, “Privacy in the Era of Emerging Technologies,” organised by the commission.

Olatunji said the NDPC, at the moment, was looking at balancing information around data privacy and protection.

“What we are doing is just to look at how to balance information around privacy and protection, which is really important, because as we are innovating, at the same time, we have to consider issues around privacy and protection,” he stated.

He added that the commission has been very bold in taking risks that would bring about growth.

“Our starting point is growing at a very alarming rate, and we are not afraid of anything. We can take risks. And that is why a lot is happening in Nigeria, and this is the level of clarity,” he explained.

In his address, Dr. Aminu Maida, executive vice chairman (EVC) of the Nigerian Communications Commission (NCC),  stated that Internet of Things holds promise for Nigeria’s economy.

The EVC, who was represented by Abraham Oshadami, executive commissioner, Technical Services (ECTS), noted that, “in an era in which digital assets, Internet of Things, future digital computing and other transformative technologies are key, and both a cornerstone of building trust for the adoption and a prerequisite for sustainable progress.

“Emerging technologies hold immense promise for Nigeria’s grand economy, but they also introduce complex risks to personal and individual rights.

“So, balancing innovation through post-ethical safeguards and public trust is the first step to ensuring that global digital advancement benefits all Nigerians without compromising their privacy or their security,” he added.

“As we just heard from the Nigeria Police, telecom operators have a vast amount of sensitive historical information daily, including connectivity apps and collaboration on privacy, security, and number protection, both to their and their inheritors,” he said.

Dr. Bako Shurkuk, commissioner for Science, Technology and Innovation, Plateau State, who represented Caleb Mutfwang, Governor of Plateau State, said, emerging technologies can be harnessed to attain sustainable growth.

 


Kindly share this post
Continue Reading

Trending