On Monday (February 16), the Nigeria Data Protection Commission (NDPC) ordered an immediate investigation into Temu, citing potential violations of the country’s 2023 Data Protection Act.

The move by Abuja opens a second major regulatory front against the ecommerce duopoly on the continent, coinciding with the final stages of a high-stakes investigation in South Africa.

For years, platforms like Temu and Shein have operated in African markets with relative impunity, leveraging direct-to-consumer logistics to bypass local infrastructure costs. Now, however, the continent’s two largest economies appear to be shifting from observation to enforcement.

The Lagos Probe: Surveillance and Data Mining

The investigation in Nigeria, announced by Dr. Vincent Olatunji, the NDPC’s National Commissioner, focuses squarely on data privacy rather than trade mechanics.

According to preliminary findings released by the Commission, Temu processes the personal information of approximately 12.7m data subjects in Nigeria alone. The investigation was triggered by concerns regarding:

• Online Surveillance: Allegations of excessive personal data collection.
• Cross-border Transfer: How Nigerian user data is moved and stored internationally.
• Data Minimisation: Whether the platform collects more data than is necessary for its function.

Dr. Olatunji issued a stark warning to local processors acting on behalf of foreign controllers, noting they could face liability if they fail to verify compliance with the Nigeria Data Protection Act.

This pivots the scrutiny of Temu from purely economic concerns to issues of digital sovereignty and user privacy — a regulatory angle that European watchdogs have also recently explored.

While Nigeria focuses on data, South Africa is tackling the market distortion caused by these platforms.

The National Consumer Commission (NCC) in South Africa is currently wrapping up an investigation into both Shein and Temu for alleged violations of the Consumer Protection Act (CPA). The probe, which began in late 2024, is scheduled to conclude by February 28, 2026 — just days from now.

“The two companies have been alerted, and both have undertaken to cooperate,” said Prudence Moilwa, head of complaints and investigations at the NCC.

The stakes are significant. If found in violation, the platforms face administrative penalties of up to R1m ($55,000) or 10% of their annual turnover in South Africa. Given the estimated transaction volumes, the 10% figure would represent a massive financial penalty.