WhatsApp Threatens to Exit Nigeria Over FCCPC Demands, $220 Million Fine
One week after Nigeria’s Federal Competition and Consumer Protection Commission (FCCPC) fined WhatsApp $220 million for a data privacy violation, the commission’s additional demands could lead to WhatsApp suspending operations in the country. At least four people familiar with the matter said Meta was considering “withdrawing certain services” in Nigeria.
FCCPC also asked WhatsApp to stop sharing user data with other Facebook companies and third parties without explicit consent. The social media platform must also provide information about data collection and restore user control over data usage.
“We want to be really clear that technically, based on the order, it would be impossible to provide WhatsApp in Nigeria or globally,” a spokesperson for WhatsApp told TechCabal via email.
“This order contains multiple inaccuracies and misrepresents how WhatsApp works. WhatsApp relies on limited data to run our service and keep users safe, and it would be impossible to provide WhatsApp in Nigeria or globally without Meta’s infrastructure. We are urgently appealing the order to avoid any impact on users,” the statement added.
Meta did not comment on the FCCPC’s claim that WhatsApp did not allow users to opt out of the 2021 policy. However, it insisted that its January 2021 Privacy Policy update does not include sharing user data. “While traditionally mobile carriers and operators store this information, we believe that keeping these records for two billion users would be both a privacy and security risk and we don’t do it,” the privacy document reads.
If WhatsApp ceases operations in Nigeria, it will have enormous consequences for individuals and small business owners. Many SMEs rely on WhatsApp, Instagram, and Facebook to reach their target customers.
Three privacy lawyers questioned the FCCPC’s reference to the National Data Protection Regulation (NDPR) as a basis for the fine. Enacted in 2019 by the National Information Technology Development Agency (NITDA), NDPR is the primary data protection framework in Nigeria.
Two lawyers who asked not to be named say the NDPR will not stand up to scrutiny in court and questioned if a government regulation could be authoritative in a matter as significant as privacy.
While Meta is undoubtedly subject to regulatory oversight, the proportionality of the $220 million fine levied by the FCCPC is questionable, two government figures who asked not to be named said.
“We are too revenue-focused. What is the opportunity cost of $220 million in government coffers?” asked an industry expert.
If WhatsApp ceases operating in Nigeria over these demands, the FCCPC and the Nigerian government will have their answer.