- within Environment, Criminal Law, Government and Public Sector topic(s)
- in United States
Abstract
The digital age has transformed the ways we communicate, conduct commerce, and interact with others. Information now travels instantly across social media platforms, blogs, messaging applications, and online publications. While this development has enhanced freedom of expression and access to information, it has also created serious legal concerns, particularly in the areas of defamation and data privacy. These two concepts, though distinct, increasingly intersect in modern society, where reputational harm can result from the misuse of personal data and the reckless publication of falsehoods. Thus, these two concepts may be distinct; however, they still intersect. This article will discuss the distinction and intersection of these concepts, using Femi Falana, SAN v. Meta Platforms Inc. (Facebook) as a case study.
INTRODUCTION
The development of social media platforms has transformed the landscape of defamation and data privacy. Statements published online can reach millions in seconds, frequently without verification, editorial control, or accountability at the time of publishing. In Nigeria, one of the most prominent recent examples of this legal tension is the case of Femi Falana, SAN v. Meta Platforms Inc. (Facebook).
The case raises crucial questions about digital platforms’ accountability for defamatory content published by users, as well as the extent to which personal data utilised in such publications may violate Nigerian privacy laws. Many have argued that the matter should be handled as a matter of defamation rather than data privacy.
Background of the Case
In Falana v. Meta, the claimant, a Senior Advocate of Nigeria and human rights lawyer, alleged that false and defamatory content was published about him on Facebook, a platform operated by Meta Platforms Inc.
The claimant contended that:
- False statements were circulated online, damaging his reputation.
- The content was widely shared, amplifying the harm.
- Meta, as the platform provider, failed to take adequate steps to remove or prevent continued circulation after being notified.
- The publication also involved the misuse of personal data and identity in a manner that engaged privacy concerns.
The suit presented the court with the question of whether a global social media company can be held responsible for defamatory publications hosted on its platform.
ANALYSIS
The case raises two key intersecting legal issues: defamation and data privacy regarding the misuse of personal information. Given the dynamics of these two issues, the following questions were addressed:
- Whether Meta can be held liable for defamatory statements published by third-party users on its platform, as publishers, editors, and broadcasters have traditionally been responsible for defamatory content. However, social media platforms challenge this structure by acting as intermediaries.
- Whether the unauthorised use of Falana’s name, identity, or associated personal data in false online publications constitutes a breach of privacy rights under:
- The 1999 Constitution of the Federal Republic of Nigeria (as amended), right to privacy
- The Nigeria Data Protection Act, 2023, protects personal data from unlawful processing and misuse
It is important to understand that Data privacy refers to the lawful collection, storage, use, transfer, and disclosure of personal information. Personal data includes: name, photograph, address, telephone number, email address, biometric data, financial records, health information and online identifiers.
Under the Nigeria Data Protection Act, 2023, personal data must be processed fairly, lawfully, transparently, and securely. This case demonstrates that defamation and data privacy are no longer separate silos. Defamation and data privacy, while separate legal issues, regularly interact in the digital age.
Defamation primarily concerns protecting a person’s reputation from false and damaging publications, whereas data privacy primarily concerns protecting an individual’s personal data from unauthorised acquisition, use, disclosure, or exploitation. While defamation often entails the dissemination of a false statement to a third party, data privacy violations result from illegal data processing, identity theft, or unauthorised handling of personal information. In essence, defamation concerns causing harm to one’s character and public standing, whereas data privacy concerns the misuse of personal identity and data rights. In many internet conflicts, however, both causes of action exist concurrently, particularly when false allegations are published alongside contact details or other identifying information.
The legal importance of the case lies in its recognition of three emerging principles:
Digital platforms cannot always claim to be merely “neutral hosts” where libellous content occurs. If notification is given but no significant action is taken, culpability may emerge based on the facts and applicable legislation. Unlike early internet platforms, which mostly served as passive communication channels, modern platforms actively select, promote, rank, and monetise content using sophisticated algorithms while retaining the authority to remove posts, suspend accounts, or limit distribution. As a result, if a platform receives credible information that content is defamatory, misleading, infringes on privacy, or otherwise unlawful, it may be required by law to respond appropriately and within a reasonable time. Complaints, court orders, solicitor’s letters, regulatory mandates, or internal reporting systems may all serve as sources of notice.
The main legal issue is knowledge. Before notice, a platform may claim it was unaware of specific illegal content amid massive amounts of online content. However, persistent inaction following notice may constitute negligence, acquiescence, or facilitation of the injury, especially if the content remains publicly accessible and spreads. Courts often consider factors such as the clarity of the complaint, the gravity of the claims, the platform’s response time, potential remedial measures, and compliance with applicable laws. In Nigeria, this idea is becoming increasingly important due to defamation law, negligence principles, and regulations such as the Nigeria Data Protection Act, 2023. The developing legal position is thus balanced platforms are not automatically accountable for every damaging post, but they may be held responsible if they wilfully refuse to take reasonable steps after being notified to clear and ongoing harm.
2. Defamation now overlaps with data protection.
The transmission of defamatory information in the digital arena often extends beyond reputational harm into the realm of data protection and privacy legislation. Many defamatory publications contain identifiable personal information, such as a person’s name, photograph, contact information, employment, social media profile, business ties, or other data that may be used to identify the individual. If such personal data is published, processed, shared, reposted, or kept online without authorized justification, the activity may be subject to the Nigeria Data Protection Act 2023. The Act requires data controllers and data processors to ensure that personal data is processed in a fair, accurate, lawful, and genuine manner. There may be concerns about whether the processing of such personal data complies with the Act’s principles of legality, accuracy, necessity, and accountability when false or misleading information is distributed in a way that unfairly exposes an individual to mockery, harassment, discrimination, or reputational harm.
Additionally, because harmful content can be accessed, searched for, downloaded, and frequently disseminated across various platforms for extended periods, the digital nature of online publications greatly exacerbates the harm caused by libellous materials. Digital publications, unlike traditional forms of defamation, may continue to circulate long after the initial publication, thereby increasing the extent and duration of the harm inflicted upon the victim. This extended exposure could result in continuous misuse or illegal handling of personal data in addition to reputational damage. Organizations, media platforms, website operators, and digital intermediaries may therefore be held liable under both defamation laws and data protection regulations if they knowingly keep or distribute such content after being notified. In this regard, the Nigeria Data Protection Act, 2023, reinforces the legal framework by recognizing the importance of safeguarding people against the illegal or harmful use of their personal data online. This brings such activity inside the purview of data protection duties, particularly under the Nigeria Data Protection Act, 2023.
3. Reputation and Privacy are Increasingly Interconnected.
Modern defamation extends beyond untrue statements because damaging articles frequently contain both false statements and the unlawful disclosure of personal information; in today’s digital world, reputation and privacy are becoming more intertwined. In the past, the main goal of defamation law was to shield an individual from false claims that damaged their reputation in the public eye. However, the scope of reputational harm has broadened due to modern online communication. Allegations, personal information, photos, videos, screenshots, location information, private chats, and other sensitive information that could lead to humiliation, harassment, emotional pain, or social exclusion are increasingly commonly included in digital publications. Because of this, it is no longer possible to consider reputational harm in isolation from privacy rights, especially when the publishing violates someone’s privacy or unlawfully discloses personal information to the public.
Therefore, spreading false statements is only one aspect of modern defamation. Unauthorised disclosure of private information, the dissemination of altered photos or videos, the publication of private conversations, impersonation, identity theft, cyberbully, and the purposeful amplification of false narratives via digital platforms are all possible examples. In many instances, the harm stems not just from the statement’s inaccuracy but also from the intrusive way that private data is revealed and shared online. The damage is also exacerbated by the durability and speed of digital communication, as harmful content may remain accessible, downloadable, and often shared long after it was first published. This results in ongoing interference with a person’s right to privacy and reputation.
Due to defamation laws, constitutional privacy provisions, and the Nigeria Data Protection Act, 2023, the convergence of reputation and privacy in Nigerian law is becoming more and more important. Courts and authorities are rapidly realising that when personal data is unlawfully processed or exposed, illegal online behaviour may simultaneously represent reputational injury and a violation of data protection responsibilities. As a result, those who are impacted by online publications can seek remedies for violations of statutory data protection obligations, invasion of privacy, abuse of personal information, and negligence in addition to defamation. The changing legal landscape reflects a wider understanding that, in the digital era, informational privacy, dignity, and reputation are interconnected rights that need to be protected.
Key legal principles arising from the case
From a doctrinal standpoint, this case reinforces the following principles:
- Online publications are considered “publications” for defamation purposes.
- Social media amplifies reputational injury.
- Misuse of digital identities can lead to privacy-related disputes.
- Intermediary platforms may be held responsible if they fail to act upon notice.
- Nigerian courts are increasingly inclined to address digital rights issues.
The Connection Between Data Privacy and Defamation
Individuals
- Before sharing anything online, always double-check it.
- Recognize that reposting content that is libellous may result in liability.
- Alongside defamation claims, there may be personal data misuse allegations.
Digital Platforms
- Put in place quicker takedown procedures
- Make content moderation systems stronger
- Adhere to Nigerian data protection regulations
- Keep channels for reporting harmful content clear.
Conclusion
A turning point in Nigerian digital jurisprudence was the Falana v. Meta case. It draws attention to how defamation has changed in the era of the internet and to its growing relationship with data privacy laws. The legal system in Nigeria is progressively shifting toward a more integrated approach, acknowledging that reputation and personal data are inextricably linked in the digital world, as the country’s courts continue to address online injury.
In the end, the case highlights a fundamental fact of contemporary communication: freedom of expression does not cover identity misuse or reputational damage caused by unrestrained digital dissemination.
References
- Constitution of the Federal Republic of Nigeria 1999 (as amended), s.37.
- Nigeria Data Protection Act, 2023, sections 24, 25, 39, 46, 48, 51.
- Sketch Publishing Co. Ltd v. Ajagbemokeferi (1989) 1 NWLR (Pt.100) 678.
- Medical and Dental Practitioners Disciplinary Tribunal v. Okonkwo (2001) 7 NWLR (Pt.711) 206.
- Falana v. Meta Platforms Inc.
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.
