African Data Protection
& Technology Regulations

Botswana's data protection legislation regulating the processing of personal data and establishing the Data Protection Authority.

Eswatini's data protection legislation regulating personal data processing and establishing the Data Protection Authority.

Lesotho's data protection legislation regulating the processing of personal data and establishing privacy protections.

Namibia's data protection legislation regulating personal data processing and establishing the Data Protection Authority.

Regulations governing digital banking, financial technology, and electronic payments in the Namibian market.

Protection of Personal Information Act — South Africa's primary data privacy law, enforced by the Information Regulator. Mandates lawful processing, consent, and breach notification.

Corporate governance code requiring IT governance, risk management, and AI ethics oversight at board level.

South African Reserve Bank standards for financial institutions, including cloud outsourcing, operational resilience, and third-party risk management.

International standard for AI management systems, increasingly adopted by SA enterprises deploying AI/ML models.

Burundi's data protection legislation regulating personal data processing and establishing data subject rights.

Comoros' constitutional framework for privacy rights, supplemented by sector-specific regulations for telecommunications and financial services.

Djibouti's data protection law regulating personal data processing and establishing the Data Protection Authority.

Eritrea relies on sector-specific privacy provisions within telecommunications and financial services regulations, pending comprehensive data protection legislation.

Ethiopia's comprehensive data protection law regulating personal data processing and establishing the Data Protection Authority.

NBE regulations governing digital financial services, mobile money, and fintech operations in Ethiopia's rapidly evolving financial sector.

Kenya's primary data privacy law, administered by the Office of the Data Protection Commissioner (ODPC). Mandates registration, data audits, and breach notification.

Central Bank of Kenya regulations governing digital lenders, requiring transparency, fair lending practices, and data governance.

Madagascar's data protection framework regulating personal data processing, enforced by the Commission Malgache de Protection des Données à Caractère Personnel (CMPDCP).

Malawi's comprehensive data protection legislation regulating personal data processing and establishing the Data Protection Authority.

Mauritius' comprehensive data protection framework, enforced by the Data Protection Office. Aligned with EU GDPR standards for cross-border data flows.

Regulations governing digital banking, fintech operations, and financial technology innovation in the Mauritius financial centre.

Mozambique's data protection legislation regulating personal data processing and establishing the Data Protection Authority.

Regulations governing digital financial services, mobile money, and electronic payments in the Mozambican market.

Rwanda's comprehensive data protection framework, regulating personal data processing and establishing the Data Protection Authority.

Seychelles' data protection legislation regulating personal data processing and establishing the Data Protection Authority.

Somalia's digital financial services are governed by Central Bank of Somalia regulations covering mobile money, electronic payments, and remittance services.

South Sudan relies on sector-specific privacy provisions within telecommunications and financial services regulations, pending comprehensive data protection legislation.

Tanzania's data protection legislation establishing the Personal Data Protection Authority and regulating data processing.

Uganda's primary data protection legislation, enforced by the Personal Data Protection Office (PDPO). Mandates registration, data audits, and compliance for data processors.

Regulations governing mobile money, digital lending, and fintech operations in Uganda's rapidly growing digital financial sector.

Zambia's data protection framework regulating personal data processing and establishing the Data Protection Authority.

Zimbabwe's data protection framework regulating the processing of personal data and establishing the Data Protection Authority.

Benin's data protection law regulating personal data processing, enforced by the Autorité de Protection des Données à Caractère Personnel (APDP).

Burkina Faso's data protection law regulating personal data processing, enforced by the Commission de l'Informatique et des Libertés (CIL).

Cape Verde's data protection framework regulating personal data processing, aligned with EU GDPR standards.

Côte d'Ivoire's data protection law enforced by the Autorité de Régulation de l'Économie Numérique (AREN). Regulates personal data processing across public and private sectors.

Central Bank of West African States regulations governing financial services, digital payments, and outsourcing in the WAEMU region.

The Gambia's data protection legislation regulating the processing of personal data and establishing the Data Protection Authority.

Ghana's data protection framework, enforced by the Data Protection Commission. Covers data collection, processing, and cross-border transfers.

Guinea's data protection law regulating personal data processing and establishing privacy protections.

Guinea-Bissau operates under the broader ECOWAS regional data protection framework while developing national data protection legislation.

Liberia's data protection legislation regulating personal data processing and establishing the Data Protection Authority.

Mali's data protection law regulating personal data processing, enforced by the Autorité de Protection des Données à Caractère Personnel (APDP).

Mauritania's data protection legislation regulating personal data processing and establishing privacy protections.

Niger's data protection legislation regulating personal data processing and establishing the Data Protection Authority.

Nigeria's comprehensive data protection law, enforced by the Nigeria Data Protection Commission (NDPC). Requires data protection compliance for all organisations processing personal data.

Central Bank of Nigeria's framework for testing innovative financial products, including AI-driven lending and regtech solutions.

Senegal's data protection law enforced by the CDP (Commission des Données Personnelles).

Central Bank of West African States regulations governing financial services, digital payments, and outsourcing across the WAEMU region.

Sierra Leone's data protection legislation regulating personal data processing and establishing the Data Protection Authority.

Togo's data protection legislation regulating personal data processing and establishing the Data Protection Authority.

Central Bank of West African States regulations governing financial services, digital payments, and outsourcing across the WAEMU region.

Algeria's personal data protection law, enforced by the Autorité Nationale de Protection des Données à Caractère Personnel (ANPDP). Regulates collection, processing, and cross-border data transfers.

Regulations governing digital financial services, electronic payments, and fintech operations in the Algerian market.

Egypt's comprehensive data protection law regulating data processing and establishing the Data Protection Centre.

Libya is developing comprehensive data protection legislation. Current privacy protections are governed by sector-specific regulations in telecommunications and financial services.

Morocco's data protection law, enforced by the CNDP (Commission Nationale de Contrôle de la Protection des Données à Caractère Personnel).

Sudan's data protection legislation regulating personal data processing and establishing the Data Protection Authority.

Tunisia's data protection law, enforced by the INPDP (Instance Nationale de Protection des Données à Caractère Personnel). Regulates data processing and cross-border transfers.

Angola's data protection framework regulating personal data processing and establishing data subject rights, enforced by the Agência de Proteção de Dados.

Banco Nacional de Angola regulations governing electronic payments, digital banking, and financial technology operations.

Cameroon's data protection framework enforced by the National Commission for the Protection of Personal Data (CNPD). Covers data collection, processing, and consent requirements.

Central African Banking Commission regulations governing financial institutions across the CEMAC region, including digital banking and outsourcing requirements.

The Central African Republic's data protection regulation governing personal data processing and privacy rights.

Chad's data protection legislation regulating the processing of personal data and establishing privacy protections.

Congo's data protection legislation regulating personal data processing and establishing data subject rights.

The Democratic Republic of Congo's data protection law regulating personal data processing and establishing the Data Protection Authority.

BCC regulations governing digital financial services, mobile money, and electronic payments in the Congolese market.

Equatorial Guinea's data protection legislation regulating personal data processing and establishing privacy protections.

Gabon's data protection framework enforced by the Commission Nationale de Protection des Données à Caractère Personnel (CNPDCP).

Sao Tome and Principe's data protection legislation regulating personal data processing and establishing privacy protections.