The National Data Protection Commission (NDPC) has launched an investigation into the data handling practices of the international e‑commerce platform Temu, following allegations that the personal information of approximately 12.7 million Nigerian users may have been collected or processed in violation of the Nigeria Data Protection Act (NDPA), 2023.
The Commission announced the probe on Monday, February 16, 2026, under the leadership of Dr. Vincent Olatunji, National Commissioner and Chief Executive Officer.
The inquiry seeks to determine whether Temu’s operations comply with statutory obligations on privacy, transparency, and accountability in data processing.
Initial assessments have raised concerns over multiple aspects of Temu’s operations, including:
• Excessive collection of personal information through online tracking;
• Insufficient transparency in communicating data practices to users;
• Inadequate safeguards to protect users’ rights;
• Non-compliance with data minimisation principles, ensuring only necessary information is collected; and
• Potential irregularities in cross-border data transfers, including storage or transmission of Nigerian user data outside the country without adequate protections.
Temu, a Chinese-based platform with millions of daily users globally, has not publicly responded to the NDPC’s directive as of mid-February 2026.
READ ALSO:Â Expect Heavy Penalties for Data Breaches, NDPC Warns Organisations
The NDPC emphasized that the NDPA applies to all entities operating in Nigeria, including foreign platforms.
Companies acting as data processors are also responsible for ensuring the compliance of the entities they serve, with penalties and enforcement measures applicable for any violations.
The investigation forms part of a broader regulatory effort to strengthen data governance in Nigeria amid rapid digital adoption and growing foreign platform penetration.
Observers note that strict compliance is essential to protecting citizens’ rights and maintaining public trust in the nation’s digital economy.
The outcome of the probe is expected to set a precedent for data protection enforcement in Nigeria and reinforce the legal framework governing personal information in the digital space.