Broadcasting
The Growing Importance of Privacy Amongst Customers and How Businesses Should Cater to it
By Kehinde Ogundare, Country Manager, Zoho Nigeria | Veerakumar Natarajan, Country Head – Kenya, Zoho Corp
Privacy is a growing concern for technology consumers worldwide. While there was a time when that may not have been the case for countries like Nigeria and Kenya, that’s no longer the reality. As connectivity becomes more affordable and ubiquitous, Kenyans and Nigerians have become increasingly tech-savvy and conscious regarding how much data they share with technology companies and what the latter are doing with it.
In the face of these growing concerns, companies operating in Africa need to be mindful of the increasing privacy mindset of their customers. Aside from regulatory compliance, companies should actively demonstrate that they care about their customers’ privacy concerns in order to build and sustain trust and to show they’re taking a proactive approach to protect their personal information.
The importance of regulatory compliance
The first step any company should take to safeguard their customers’ privacy is ensuring they’re compliant with all of the relevant laws and regulations. In countries like Kenya and Nigeria, data protection regulations are relatively new.
The Data Protection Act of 2019, enforced by the Office of the Data Protection Commissioner (ODPC), regulates data protection in Kenya. The act expressly prohibits organisations from processing personal data if their consent has not been provided first. Each organisation must have a data controller and/or a data processor whose responsibility is to prove they’ve obtained consent before processing a person’s data.
Nigeria’s Data Protection Act, meanwhile, was signed into law in 2023. The act governs both manual and automatic data processing. The act also established the Nigeria Data Protection Commission (NDPC), which is an independent body that governs data protection and regulation in the country. In addition to defining sensitive personal data as including an individual’s genetic and biometric data as well as their race, ethnicity, and health status, among other things, the act also provides specific grounds for the processing of this sensitive personal data. According to the act, such data can be processed where consent is provided or where processing is necessary for social security or employment laws.
Both of these laws are in line with similar laws and regulations around the world, such as Europe’s GDPR. That means they’re not only a good place for Nigerian and Kenyan businesses to start for compliance, but they also help businesses gain good footing when it comes to protecting customer data should they start operating internationally.
Beyond compliance
Companies should, however, view regulatory compliance as the bare minimum when it comes to meeting their customers’ privacy needs. Given the parlous state of privacy protection across many African countries, going above and beyond with customer privacy can be a positive differentiator for companies that get it right.
Among the initiatives they can undertake in this direction are investing in data center security to minimise the collection of data, requesting permission from customers while collecting sensitive information, and ultimately reducing their reliance on selling user data for revenue gains. Another initiative that organisations can implement is implementing multi-factor authentication if they require customers to log in to an account to access their products and services.
Another aspect that businesses should pay close attention to is which technology vendor they work with to run their internal operations. Businesses should ensure the third-party tech tools they deploy within their IT infrastructure also come with strong data privacy and protection controls, and the corresponding vendors also practice transparent data collection practices. Should one of these vendors fall victim to a cybersecurity breach, the customer data of the organisations using it could easily fall into nefarious hands.
Businesses should, therefore, ensure they make use of software providers and vendors that are, themselves, compliant with all the relevant privacy laws and regulations, and offer a comprehensive set of security measures and procedures, including controlled user access, enterprise mobility management (EMM) integration, IP restrictions, and secure integrations.
Riding the positives of proactive protection
While there are many negatives associated with data protection failures, including reputational damage and legal punishments, it’s also important that organisations understand the positives associated with proactive data protection.
High up on the list of those positives is building trust. Customers who trust the companies they buy from are more likely to be loyal in the long term, make repeat purchases in the future, and act as evangelists to others. At a time when customers are increasingly concerned about data privacy, building that trust is more difficult, but also more rewarding than ever. It, in other words, is something worth investing in.
Nigeria Data Protection Commission (NDPC) has refused to release details of the data and privacy rights violation for which it fined MultiChoice Nigeria, despite receiving a Freedom of Information (FOI) request from FIJ.
FIJ otherwise Foundation for Investigative Journalism, is an independent, not-for-profit organisation that combats injustice, holds power to account and speaks for the voiceless.
In its announcement on July 6, the NDPC said it had fined MultiChoice Nigeria N766,242,500 for breaching the data and privacy rights of subscribers and even those who are not necessarily subscribers.
FIJ emailed the data protection commission an FOI request on July 9.
The commission acknowledged the receipt of the email that same day and added: “It has been forwarded to the relevant department and we would respond soon.”
Fifteen days later, FIJ got no other response from the NDPC.
In Nigeria, FOI requests have a seven-day timeframe, and it starts counting as soon as a public institution receives a request for public information.
FIJ understands that holidays, which include a Sunday and a public holiday, are to be excluded in the computation of the timeframe.
The receiving institution is mandated, within those seven days, to either provide the requested information or explain in detail why it is unable to do so based on the provisions of the FOI Act.
Established under the Nigeria Data Protection Act 2023, the NDPC’s tasks include safeguarding data privacy, enforcing regulations and promoting responsible data handling in the country.
When the Commission announced the N766.2 million fine against MultiChoice Nigeria, it said the company had violated the privacy rights of subscribers and allowed the illegal cross-border transfer of personal data of Nigerians.
MultiChoice Nigeria operates through various subsidiaries, such as DStv and GOtv. The NDPC said it launched an investigation into the company in the second quarter of 2024.
“NDPC found, among others, that Multichoice violated the data privacy rights of subscribers and their friends who are not necessarily subscribers,” the statement issued by NDPC read in part.
“The Commission also found that Multichoice carries out illegal cross-border transfer of personal data relating to data subjects in Nigeria. The depth of data processing by Multichoice is patently intrusive, unfair, unnecessary and disproportionate.”
FIJ’s FOI request aimed to understand the extent of the data and privacy breaches committed by MultiChoice Nigeria, the remedial measures directed by the NDPC and the specific channels through which the company collected the personal data of Nigerians.
Two weeks after the request was submitted, the NDPC has refused to respond.
Section 7, sub-section 4, of the Freedom of Information Act (2011) states, “Where the government or public institution fails to give access to information or record applied for under this Act or part thereof within the time limit set out in this Act, the institution shall, for the purposes of this Act, be deemed to have refused to give access.”
According to the Act, where a case of wrongful denial of access is established, the defaulting officer or institution commits an offence and is liable on conviction to pay a N500,000 fine.
At the time of this report, there was no publicly documented case of the NDPC granting an FOI request to share more details after an investigation.
In 2023, FIJ detailed how the Nigerian government often violated the FOI Act. Journalists at top newspapers in the country noted that government agencies had a habit of disregarding FOI requests, despite being legally obligated to respond.
Spotify is turning the spotlight toward the next wave of African music innovators with its latest RADAR Africa picks: Nigerian Afrobeats talent FOLA and South African Afro House DJ and producer Thakzin. As part of Spotify’s ongoing commitment to discovering and amplifying emerging voices across Sub-Saharan Africa (SSA), RADAR continues to champion boundary-pushing artists shaping the sound of tomorrow.
FOLA, born Folarin Odunlami, first caught attention with his freestyles on social media, quickly making a name for himself with his blend of Afrobeat rhythms and soulful storytelling. His breakout EP What A Feeling, featuring the Bella Shmurda-assisted hit “Who Does That,” laid the foundation for a fast-rising career that now includes collaborations with BNXN, Magixx, and BhadBoi OML. “Looking at where I’m coming from, I see every opportunity as a blessing. So, it’s a blessing to have been selected, just like others before me,” says FOLA. “I want my fans to know that in the midst of all the noise, I made something they could truly connect with, feel and share with those who mean something to them. I want everyone who listens to at the very least, recognise that they’re witnessing the early days of something truly special.”
On the southern tip of the continent, Thakzin’s journey began in Ivory Park, Johannesburg, where early jazz and kwaito influences, plus a deep respect for traditional percussion, shaped his signature sound. With co-signs from Black Coffee and international tastemakers like Laurent Garnier, his genre-defying approach to Afro House, heard in his 2023 anthem “The Magnificent Dance,” is setting global dance floors alight. Following the release of Magnificent Dance, his version of Horns In The Sun by DJ Kent became a viral hit across South Africa and gained global traction, potentially surpassing the success of Magnificent Dance itself. Thakzin’s sound is rooted in African spirituality and healing, inspired by the rhythmic power of traditional drums. Shaped by a musical upbringing and guided by his father, a keyboardist, he blends rich harmonies with percussive elements to create an immersive Afro-house experience. His music evokes emotion, movement, and ancestral energy, anchored in freedom and African expression. In recognition of his role in shaping 3-step, Thakzin was the first cover artist of Spotify’s 3 STEP playlist.
Spotify RADAR isn’t just a platform, it’s a launchpad. It reflects Spotify’s commitment to empowering local artists across SSA and delivering the best listening experience in the region. From Lagos to Johannesburg, RADAR celebrates the diversity of talent on the continent, offering artists equal access to global audiences.
“At Spotify, we believe in the power of African storytelling through music. FOLA and Thakzin are both incredibly unique artists who represent the spirit of RADAR—fresh voices with global potential,” says Phiona Okumu, Spotify’s Head of Music, Sub-Saharan Africa. “By amplifying their journeys, we hope to inspire more creators across the continent to believe in their vision and reach for bigger stages.”
With FOLA and Thakzin stepping into the spotlight, one thing is clear: Africa’s future sound is already here, and Spotify is where you find it first.
Paradigm Initiative (PIN) commends the decision by the High Court of Malawi, sitting as the Constitutional Court (ConCourt), which finds that section 200 of the Penal Code of Malawi, criminalising defamation, is unconstitutional. This follows a unanimous ruling by Justices Chifundo Kachale, Fiona Mwale, and Mzondi Mvula.
The decision by the three-judge bench concludes a case brought by Joshua Chisa Mbele against the Director of Public Prosecutions and the Attorney General, where the latter leveled charges against Mbele for alleged defamatory statements made regarding a public official in Malawi. In his defence, Mbele challenged the constitutionality of section 200 of the Penal Code of Malawi, which criminalised defamation, arguing that this provision infringed the right to freedom of expression as provided for under section 35 of the country’s Constitution, as well as running counter to Malawi’s obligations under regional and international human rights law.
In its commendable ruling, the ConCourt upheld the right to freedom of expression enshrined in the Malawian Constitution and described the punishment of imprisonment, as outlined in Section 200 of the Malawi Penal Code, as having a “chilling effect on public discourse and democratic participation.” In a ruling delivered on July 16th, 2025, the court said it did not find Section 200 of the Malawi Penal Code reasonable or necessary in light of the civil remedies available to deal with defamation.
PIN celebrates this win, having expressed concerns in the past over Malawi’s repressive laws through the Londa report on the state of digital rights and inclusion in Malawi and a joint advocacy statement calling for the repeal of laws infringing on freedom of expression.
PIN hopes that this decision will stir the legislature in Malawi to repeal laws that have a bearing on freedom of expression such as the Electronic Transactions and Cybersecurity Act 2016, which is increasingly being deployed as a weapon to criminalise freedom of expression and media freedom in Malawi with broad provisions such as section 87 that criminalises publication of offensive communications and an overly broad section 91 of the Act (prohibiting cyber spamming) which has been used to target individuals for insulting the President.
Acknowledging the judiciary’s vital role in promoting fundamental rights and freedoms and ensuring that repressive laws are outlawed, PIN applauds the progressive decision. The Malawi judiciary has demonstrated this leadership with a landmark case that can lead to further legislative reforms in Malawi and inspire other African judiciaries to adopt a human rights-based approach to adjudicating over such cases.
NIBBS: Banks Close 29.4m Accounts, Dormant Accounts Hit 33.39m
NDPC Hides MultiChoice Privacy Violation Details Despite FOI Request- FIJ
Cardoso, CBN Boss Risks Arrest over Alleged N5.2 Trillion Unremitted Funds
UK Businesses Look to Africa As Strategic Growth Partners
FG Plans N50m STEEM Grant to Support Student Innovation in August
Telecom2 days agoGlo Launches Nigeria’s First-of-its-kind Device Protection Plan
Telecom2 days agoTelcos: How and Why Network Services have Been Poor
Broadcasting2 days agoCanal+ Clears Final Hurdle to Acquire South Africa’s MultiChoice
E-Business2 days agoNIMC Warns Nigerians of Fake NIN Website
Telecom2 days agoMTN Executive Adeola Oduntan Emerges as Africa’s Supply Chain Leader of 2025
- Telecom2 days ago
MTN Nigeria Sweeps Africa’s Procurement Awards With Innovation and Impact
E-Business2 days agoMicrosoft Servers Hacked by Chinese Groups
Telecom2 days agoTelegram to allow U.S. users send, receive crypto directly in app