The Nigeria Data Protection Commission has ordered an immediate inquiry into the operations of Temu, a global e-commerce platform, over potential violations of the Nigeria Data Protection Act (NDP Act) 2023.
In a statement issued on Monday by Head of Legal, Enforcement & Regulations, Babatunde Bamigboye, the NDPC said the investigation was prompted by concerns regarding online surveillance through personal data processing, accountability, data minimisation, transparency, duty of care, and cross-border data transfers.
Preliminary findings suggest that Temu handles the personal data of around 12.7 million Nigerians, with 70 million daily active users worldwide.
The commission’s National Commissioner and CEO, Dr Vincent Olatunji, cautioned, “Processors who engage in processing activities on behalf of data controllers without verifying their compliance with the NDP Act may be liable under the NDP Act.”
The move underscores the growing scrutiny of digital platforms in Nigeria, as authorities seek to ensure that personal information is managed in accordance with the law.
Temu first went live in the United States in September 2022 and has rapidly expanded to more than 90 markets worldwide by 2025. It has grown in part through heavy spending on advertising and promotions to attract users.
The platform entered the Nigerian market in late 2024. Its arrival was marked by an aggressive marketing push across social media and mobile app stores, where it became, for a time, one of the most downloaded apps in the country.
Nigeria’s large and youthful population, growing smartphone usage, and expanding e‑commerce sector made the country attractive for Temu’s growth strategy. The company aims to challenge existing players by offering low‑priced goods and flooding the market with targeted advertising.
