By Iroyin Yoruba Television
Meta Platforms has appealed a Lagos High Court judgment concerning the processing of Nigerian Facebook and Instagram users’ personal data for behavioural advertising, opening a new stage in a legal dispute over consent, privacy and the way global technology companies use personal information in Nigeria.
The appeal was filed after a Lagos High Court ruling ordered Meta to stop processing and profiling the personal data of affected Facebook and Instagram users for behavioural advertising without a lawful basis.
The case has placed questions about digital privacy and targeted advertising at the centre of a dispute involving one of the world's largest technology companies and Nigerian users of its social-media platforms.
Meta operates Facebook and Instagram, two of the most widely used social-media platforms globally.
Both platforms collect and process significant amounts of information about users as part of their services.
Such information can include activity on the platforms, interactions with content, advertising engagement and other data generated through users' digital activities.
Technology companies use data processing for a variety of purposes, including improving services, measuring advertising performance, preventing fraud and delivering personalised experiences.
Behavioural advertising is one of the most commercially significant uses of digital data.
It involves using information about a person's activities or interests to help determine which advertisements may be relevant to that person.
For advertisers, targeted advertising can provide a way to reach specific groups of potential customers rather than displaying the same advertisement to every user.
For users, however, questions can arise about how much information is collected, what purposes it is used for, how long it is retained and whether adequate consent has been obtained.
Those questions form an important part of the Nigerian case involving Meta.
The Lagos High Court judgment had found that Meta's processing of Nigerian Facebook and Instagram users' personal data for behavioural advertising was unlawful where the company lacked an appropriate lawful basis.
The court also ordered Meta to stop the relevant processing and profiling activities unless they could be carried out on a lawful basis.
The judgment included financial awards to the applicants.
Meta has now challenged the ruling before a higher court.
The appeal means that the legal dispute is not yet finally settled.
An appeal allows the appellant to challenge aspects of a lower court's decision, including the interpretation or application of relevant law.
The appellate court will consider the grounds presented by Meta and the arguments from the opposing parties before reaching its own decision.
The case is significant because Nigeria's digital economy has expanded rapidly.
Millions of Nigerians use social-media platforms for communication, entertainment, education, news, marketing and business.
For many small businesses, Facebook and Instagram are also important commercial tools.
Entrepreneurs use the platforms to advertise products, communicate with customers and build brands.
This means that changes to the way platforms process user information could have implications extending beyond individual privacy.
The dispute also highlights the growing importance of Nigeria's data-protection framework.
Nigeria has developed laws and regulatory institutions intended to protect personal information and establish rules for organisations that collect and process personal data.
The Nigeria Data Protection Commission is responsible for administering and enforcing the country's data-protection framework.
The framework requires organisations processing personal data to meet specified obligations concerning issues such as lawful processing, transparency, security and the rights of data subjects.
For international technology companies operating in Nigeria, those requirements apply within the Nigerian legal environment.
The Meta case therefore raises questions about how global platforms should adapt their data practices to national privacy requirements.
Meta's appeal does not mean that the company has been found guilty of a criminal offence.
The dispute concerns the legality of its data-processing practices and the interpretation of privacy obligations.
The company is entitled to challenge the lower court's decision through the established legal process.
The outcome of the appeal could influence how similar data-processing disputes are handled in the future.
One of the central concepts in the dispute is consent.
Consent is one possible legal basis for processing personal information under data-protection frameworks, but it is not necessarily the only basis available to organisations.
Different types of data processing can potentially rely on different legal grounds depending on the circumstances and the applicable law.
This makes the question more complicated than simply asking whether a user clicked an agreement when opening a social-media account.
Modern digital services often involve lengthy terms and privacy notices.
Users may accept those conditions quickly without fully understanding how their information may subsequently be processed.
Regulators and courts around the world have increasingly examined whether consent mechanisms genuinely provide users with meaningful control over their personal information.
The Nigerian case comes within this broader international debate.
Technology companies have built major advertising businesses around digital targeting.
Platforms can use data and algorithms to determine which advertisements are likely to be relevant to different categories of users.
The system can be highly valuable to advertisers because it allows them to focus their spending on particular audiences.
For example, a business selling a specialised product may prefer to advertise to people who have demonstrated an interest in that type of product rather than to the entire population.
However, the more information used to create such targeting, the greater the privacy questions can become.
Users may not always know precisely what information contributes to an advertising profile.
They may also be unaware of how different pieces of information can be combined to produce detailed predictions about their interests or behaviour.
This is why data-protection rules increasingly focus not only on the existence of personal information but also on how it is processed.
The Meta case could therefore have broader implications for digital advertising practices in Nigeria.
If the courts ultimately require significant changes to how user data is processed for behavioural advertising, other technology companies operating in the country may also need to examine their own practices.
That does not mean that every company would automatically be subject to the same outcome.
Each organisation's activities and legal arrangements would need to be assessed separately.
Nevertheless, court decisions involving major technology platforms can influence how businesses understand regulatory expectations.
The case is also relevant to Nigerian consumers.
Many users may not distinguish between a social-media platform and the advertising technology operating behind it.
They may think primarily about posting photographs, communicating with friends or watching videos.
Behind those activities, however, complex systems analyse information and determine what content and advertising users see.
Understanding those systems has become increasingly important as digital platforms become part of everyday life.
Privacy advocates have long argued that users should have greater transparency and control over their personal information.
Technology companies have argued that data processing supports free or low-cost digital services and enables advertising systems that allow businesses to reach customers efficiently.
The legal system must balance these competing considerations within the framework established by Nigerian law.
The Meta appeal will provide an opportunity for the appellate court to examine those issues again.
The dispute also demonstrates the growing importance of national data-protection laws to multinational technology companies.
For many years, internet services operated across borders with relatively little variation in their basic models.
As governments have strengthened privacy regulation, technology companies have increasingly had to adapt their practices to different jurisdictions.
European privacy regulations, for example, have significantly influenced global discussions about personal data.
Other countries, including Nigeria, have developed their own regulatory frameworks reflecting their national legal and economic environments.
The result is a more complex regulatory landscape for multinational digital platforms.
A company may need to maintain common global technology infrastructure while also ensuring that its practices comply with local requirements.
This can create difficult questions about consent, data transfers, advertising, user rights and regulatory enforcement.
Nigeria's growing digital economy makes those questions increasingly important.
The country has a large and youthful internet population, and digital services are expanding across banking, commerce, education, entertainment and communication.
As more economic activity moves online, personal data becomes increasingly valuable.
Customer information can help businesses understand demand and provide services.
At the same time, unauthorised or unlawful use of personal information can expose individuals to privacy violations, fraud and other risks.
The balance between innovation and privacy is therefore becoming a major policy and legal issue.
The Meta case is one example of that wider development.
The financial awards contained in the lower court judgment also illustrate that privacy disputes can have economic consequences for companies.
The judgment reportedly awarded the applicants the naira equivalent of $100,000 in general damages and N1 million in costs.
Meta's appeal challenges the lower court's findings, meaning the final financial consequences remain subject to the appellate process.
The appeal also prevents the lower court's decision from being treated as the final word on the dispute.
The legal arguments presented by both sides will be important.
Meta is expected to challenge the basis on which the lower court concluded that its data-processing practices were unlawful.
The applicants, meanwhile, will have the opportunity to defend the judgment and argue that the court correctly applied Nigerian data-protection principles.
The appellate court will determine the issues based on the legal arguments and evidence presented before it.
For Nigerian technology companies, the case is also worth watching.
Local startups increasingly depend on user data to operate digital products.
Fintech companies, e-commerce platforms, health technology businesses, educational platforms and social applications all collect some form of personal information.
The regulatory principles established through major privacy cases can therefore affect the wider technology ecosystem.
Startups may need to consider privacy requirements when designing products rather than treating compliance as an issue to be addressed after a product has already reached millions of users.
Privacy-by-design principles can help companies build appropriate controls into their systems from the beginning.
Such measures may include limiting the amount of personal information collected, clearly explaining why information is needed, protecting stored data and giving users meaningful choices where required.
The Meta dispute also highlights the importance of transparency.
Users need to understand how their information is being used if they are expected to make informed decisions.
Long and complicated privacy notices may technically contain information but can still be difficult for ordinary users to understand.
Technology companies therefore face increasing pressure to make privacy information clearer and more accessible.
For consumers, the case is a reminder that social-media services involve more than the visible interface.
Behind a Facebook post or Instagram interaction are data systems that may process information for a range of purposes.
Users should therefore pay attention to privacy settings and understand what information they are voluntarily making public.
They should also remain cautious about sharing sensitive personal information on social-media platforms.
However, responsibility does not rest entirely with users.
Data-protection laws exist partly because individuals often have limited bargaining power when dealing with large digital platforms.
A person may want to communicate with friends or promote a business through a particular platform but have little practical ability to negotiate the platform's data-processing terms.
Regulation therefore establishes minimum standards that companies must meet.
The courts play a role in determining how those standards apply to particular circumstances.
The Meta appeal will test some of those principles in the Nigerian context.
Another important issue is enforcement.
Nigeria's data-protection authorities have been increasingly active as the country's digital economy grows.
Effective enforcement can encourage companies to take privacy requirements seriously.
At the same time, predictable rules can help businesses understand what is expected of them.
A stable regulatory environment is important for attracting technology investment.
Companies need to know how privacy rules will be interpreted and what consequences may follow from non-compliance.
The courts' interpretation of data-protection law can therefore contribute to that regulatory certainty.
The Meta case could eventually become an important reference point for future disputes involving targeted advertising and personal-data processing.
The outcome could clarify how Nigerian law applies to large-scale behavioural advertising systems.
It could also help determine what constitutes an adequate legal basis for particular forms of data processing.
However, it is too early to predict the final result.
The appeal has only moved the dispute into another stage of the judicial process.
The appellate court's eventual judgment will depend on the arguments, evidence and applicable law.
Until then, the lower court's decision remains contested by Meta.
The dispute also illustrates how technology and law are increasingly interconnected.
Digital platforms can develop products faster than traditional legal systems can adapt.
New technologies such as artificial intelligence, behavioural advertising and automated profiling create questions that were less significant when earlier generations of internet services were developed.
Courts and regulators must therefore apply existing legal principles to rapidly changing technological systems.
Technology companies, meanwhile, must monitor legal developments and adjust their products where necessary.
For Nigeria, the growing importance of data protection reflects the country's transition toward a more digital economy.
As financial services, commerce, government services and communication increasingly move online, personal information becomes a major part of the digital infrastructure.
Protecting that information can help build public confidence in digital services.
Consumers who believe their information is handled responsibly may be more willing to use online platforms.
Businesses that can demonstrate strong privacy practices may also gain greater trust from customers.
The Meta case is therefore relevant not only to Facebook and Instagram users but to the wider development of Nigeria's digital economy.
The appeal will now proceed through the legal system.
The eventual decision could determine whether Meta's current approach to behavioural advertising in Nigeria can continue in its present form or whether changes will be required.
It could also provide further guidance for other technology companies processing personal data in the country.
For Nigerian users, the case is an important reminder that digital privacy is no longer a purely technical issue.
It has become a legal and economic issue involving consumers, businesses, regulators and courts.
As technology platforms become more sophisticated in collecting and analysing information, questions about consent and lawful processing are likely to become even more important.
Meta's decision to appeal ensures that those questions will receive further judicial consideration.
For now, no final resolution has been reached.
The lower court has issued its findings, Meta has challenged them, and the appellate process will determine the next stage of the dispute.
The outcome will be closely watched by Nigeria's technology industry because it could influence how personal data is processed for digital advertising and how global technology companies operate within the country's privacy framework.
The case therefore represents another significant moment in Nigeria's continuing effort to balance technological innovation, commercial activity and the protection of citizens' personal information in an increasingly digital society.