The Digital Age: Falana v. Meta and the Future of Data Privacy in Nigeria

CONTRIBUTOR: TOBENNA MOGBO

INTRODUCTION.

In the bustling digital economy of Nigeria, Africa’s largest tech hub, data has become the “new oil.” With over 100 million internet users, the country is a goldmine for global tech giants. In 2024, the number of data breach victim globally increased by 211%, reaching 1.3 billion, with the average cost of a data breach rising 10% to $4.9 million. These incidents are primarily driven by financially motivated actors, with 90% of breaches linked to profit, and human error or misuse involved in 60%–95% of cases.^[1] This study further alerts that as the digital footprint of Nigerians expands, so does the risk of data exploitation, misinformation, and privacy breaches.

The legal battle of Femi Falana (SAN) v. Meta Platforms Inc.^[2] stands at the epicenter of this tension. This case is not merely a dispute between a prominent human rights lawyer and a trillion-dollar corporation; it is a landmark moment that tests the strength of Nigeria’s newly minted data protection laws against the global hegemony of Big Tech.

THE BACKDROP: NIGERIA’S DATA PROTECTION EVOLUTION

For years, Nigeria operated in a regulatory vacuum regarding digital privacy. This changed in 2019 with the Nigeria Data Protection Regulation (NDPR), followed by the landmark Nigeria Data Protection Act (NDPA) of 2023.^[3]

The Nigeria Data Protection Act (NDPA) established the Nigeria Data Protection Commission (NDPC) and codified the rights of “Data Subjects” (citizens). It mandates that data controllers—regardless of where they are headquartered—must process the data of Nigerians transparently, securely, and with a clear legal basis.^[4]

THE CATALYST: FALANA V. META

Early 2025, Femi Falana, a Senior Advocate of Nigeria (SAN) known for his civil rights activism, took Meta (the parent company of Facebook, Instagram, and WhatsApp) to court.^[5]

THE CORE ALLEGATIONS:

• Identity Theft and Scams: Falana alleged that Meta’s platforms allowed fraudulent accounts to use his name and photograph to solicit funds and spread misinformation.
• Negligence in Content Moderation: Despite numerous reports to the platform, Falana argued that Meta failed to act swiftly to pull down the imposter accounts, leading to reputational damage.
• Discriminatory Privacy Standards: A central pillar of the argument is the “Double Standard” theory. Falana contends that Meta provides robust privacy protections and rapid response mechanisms to users in the European Union (under GDPR) while leaving Nigerian users vulnerable to systemic abuse.
• Violation of the NDPA: The lawsuit asserts that Meta’s failure to protect his personal data from being weaponized by scammers is a direct breach of the Nigeria Data Protection Act.

IMPORTANT PAIN POINT ENSUING FROM THE CASE

1. Testing Extraterritoriality

One of the biggest hurdles in tech litigation is jurisdiction. Meta is headquartered in Menlo Park, California. By suing in a Nigerian High Court, Falana is asserting that if a company profits from Nigerian users and harvests their data, it must be subject to Nigerian laws. A victory for Falana would set a precedent that Big Tech cannot hide behind international borders.

2. Challenging the “Digital Colonialism” Narrative

There is a growing discourse that tech companies treat the Global South as a “wild west” for data harvesting with minimal oversight compared to their operations in the West. Falana v. Meta demands equity in digital safety, insisting that a Nigerian’s digital identity is worth as much as a European’s.

3. Accountability for Algorithmic Harm

The case moves beyond simple “privacy” into the realm of “duty of care.” It asks: Is a platform responsible for the harm caused by its algorithms when they amplify fraudulent content?

THE CURRENT CLIMATE: NDPC’S GROWING TEETH

While the Falana case proceeds, the Nigerian government has signaled its own intolerance for data breaches. Late in the year 2024, the NDPC fined Fidelity Bank over ₦500 million for data violations,^[6] and there have been ongoing probes into various fintech and social media platforms. The Falana case adds a high-profile “human face” to these institutional efforts, and further serves as a sensitization to over 100 million internet users in Nigeria.

THE ROAD AHEAD

Meta’s defense typically hinges on the “Safe Harbor” principle—arguing they are merely the “pipes” through which information flows and are not responsible for user-generated content. However, under the NDPA 2023, the definition of a “Data Controller” carries specific obligations to prevent unauthorized processing and ensure data integrity.

With Falana’s success in the judgment delivered in the High court of Lagos State by Justice Olalekan A. Oresanya on 13^th January, 2026,^[7] there can be a trigger of a wave of “class action” style lawsuits from other Nigerians who have fallen victim to identity theft and digital fraud on social media.

CONCLUSION

Falana v. Meta is more than a legal skirmish; it is a declaration of digital sovereignty. It challenges the notion that Silicon Valley can dictate the terms of privacy in Lagos or Abuja. As the case unfolds, it will define the boundaries of the Nigeria Data Protection Act and determine whether Nigeria’s digital citizens are protected by the law or merely products in a global data marketplace.

Snippet: Falana v. Meta is more than a legal skirmish; it is a declaration of digital sovereignty. It challenges the notion that Silicon Valley can dictate the terms of privacy in Lagos or Abuja. As the case unfolds, it will define the boundaries of the Nigeria Data Protection Act and determine whether Nigeria’s digital citizens are protected by the law or merely products in a global data marketplace.

REFERENCE:

1. 90 Business-Critical Data Breach Statistics for 2025. Published: August 15, 2025 available on https://www.huntress.com/blog/data-breach-statistics accessed on February 2026. ↑
2. SUIT NO.: LD/17783MFHR/2025. ↑
3. Data Protection in Nigeria available on https://www.dlapiperdataprotection.com/index.html?t=law&c=NG accessed on February 2926. ↑
4. Nigeria Data Protection Commission (NDPC) Official Website – https://ndpc.gov.ng/ accessed on February 2026. ↑
5. The Punch newspaper available on https://punchng.com/court-awards-25000-against-meta-in-falanas-privacy-suit/ accessed on February 2026. ↑
6. Fidelity Bank Affirms Commitment to Data Protection and Strong Corporate Governance available on https://www.fidelitybank.ng/fidelity-bank-affirms-commitment-to-data-protection-and-strong-corporate-governance/ accessed on February 2026. ↑
7. Ibid ↑