The NDPC imposed a penalty of approximately ₦555.8 million on Fidelity Bank Plc after finding that the bank processed the personal data of over one million users of its banking application without valid consent and engaged non-compliant third-party data processors, in breach of the Nigeria Data Protection Act 2023.

The largest fine issued by the NDPC to date and its most significant enforcement action against a major financial institution, demonstrating that the regulator will sanction systemic consent failures in high-volume digital banking and escalate from remedial directives to substantial monetary penalties where controllers contest findings. NOTE: Fidelity Bank publicly disputed the findings; this entry is drawn from NDPC public statements and reputable secondary reporting, as the Commission has not published a full written decision, the primary determination text should be confirmed by a reviewer.