PDPAI PETITIONS NDPC AGAISNT E-COMMERCE COMPANIES FOR PRIVACY NOTICE VIOLATIONS

In FCT Abuja on the 23rd December 2024, the Personal Data Protection Awareness Initiative (PDPAI), a non-governmental organization focused on digital rights, and consumer protection announced that it has filed a petition with the Nigeria Data Protection Commission (NDPC) against several prominent e-commerce companies operating within Nigeria. These companies include but are not limited to the following:

1. Jumia
2. KongaPay
3. Jiji
4. ABDigital
5. Ajebomarket
6. Buycare
7. Kara
8. Slot…
9. AssetChemist
10. Carrots
11. Chutku
12. FouaniGroup
13. Kaiglo
14. Kusnap
15. RapidBTS

The petition alleges that these companies have failed to display privacy notices that comply with the provisions of the Nigeria Data Protection Act 2023 (NDPA).
The NDPA mandates that all organizations handling personal data must provide individuals with clear and concise privacy notices. These notices must contain critical information, including:

• The identity and contact details of the data controller.
• The purposes for which personal data is collected and processed.
• The categories of personal data being collected.
• The legal basis for processing personal data.
• The rights of data subjects, including the right to access, rectify, erase, and restrict processing.
• Information on data transfers to third parties, if applicable.
• The retention period for personal data.
• Information on the use of automated decision-making, including profiling.
• Information on the right to lodge a complaint with the NDPC.
• PDPAI’s investigation revealed that the privacy notices of the targeted e-commerce companies lack several of these fundamental clauses. This non-compliance raises serious concerns about the companies’ data protection practices and their respect for individual privacy rights.
• The NGO urges the NDPC to thoroughly investigate these allegations and take appropriate action to ensure compliance with the NDPA. The petition seeks the following remedies:
• Order the e-commerce companies to amend their privacy notices to comply with the NDPA.
• Impose appropriate sanctions on the companies for their non-compliance.
• Issue a public statement highlighting the importance of data protection and the need for all organizations to comply with the NDPA.
• This action by the NGO aims to raise public awareness about data protection rights and to hold e-commerce companies accountable for their data handling practices. The organization believes that strong data protection measures are crucial for a thriving digital economy and a society that respects individual privacy.

Personal Data Protection Awareness Initiative (PDPAI), is a non-for-profit organization with the objective of advocating for the protection of the privacy and personal data of individuals. This is done by raising awareness, monitoring and reporting non-compliance, championing enforcement actions, and demanding accountability from organizations that violate data protection principles.

PDPAI
Mobile: +234 (0) 809 989 5658
Email: complaint@pdpainitiative.com

Disclaimer:
This press release is for informational purposes only and does not constitute legal advice.