Africa Privacy Resources

Disclaimer: The information provided in this list, sourced from the IAPP website, is for informational purposes only and should not be considered as legal advice. It is crucial to verify the status of data protection legislation in each country through official sources. This list serves as a reference guide and should not replace professional legal counsel or consultation. For accurate and up-to-date information, consult official sources or seek legal advice.

Africa:

Algeria
- Privacy Legislation:
  - Law No. 18-07 on the protection of natural persons with respect to the processing of data (In-Language)
    Authority:
  - National Authority for Protection of Personal Data (not yet established)
    Last Updated: December 2021
Angola
- Comprehensive Data Protection Law:
  - DPA Legislation Page
    Authority:
  - Agency of Data Protection
    Last Updated: December 2021
Benin
- Privacy Legislation:
  - DPA Legislation Page
    Authority:
  - Personal Data Protection Authority (APDP)
    Additional Resources:
  - Benin is included in the IAPP's "Global Comprehensive Privacy Law Mapping Chart."
    Last Updated: December 2021
Botswana
- Privacy Legislation:
  - Data Protection Act, 2018
    Authority:
  - Information and Data Protection Commission (not yet established).
    Last Updated: December 2021
Burkina Faso
- Privacy Legislation:
  - DPA Legislation Page
    Authority:
  - Commission for Informatics and Liberties
    Last Updated: December 2021
Burundi
- Privacy Legislation/Authority
  - The IAPP is unaware of a data protection authority or data protection legislation for Burundi.
    Last Updated: December 2021
Cape Verde
- Privacy Legislation:
  - DPA Legislation Page
    Authority:
  - Comissão Nacional de Proteção de Dados
    Last Updated: December 2021
Central African Republic
- Privacy Legislation/Authority:
  - The IAPP is unaware of data protection legislation in Central African Republic.
    Last Updated: December 2021
Chad
- Privacy Legislation:
  - DPA Legislation Page
    Authority:
  - National Agency for Computer Security and Electronic Certification
    Last Updated: December 2021
Comoros
Congo
Djibouti
- Privacy Legislation:
  - The IAPP is unaware of data protection legislation in Djibouti.
    Last Updated: December 2021
Egypt
- Privacy Legislation:
  - View Data Protection Law (English, In-Language)
    Authority:
  - Personal Data Protection Centre (Not yet established)
    Last Updated: December 2021
Equatorial Guinea
- Privacy Legislation:
  - Law No. 1/2016 Data Protection Law
    Authority:
  - The IAPP is currently unaware of an established data protection authority for Equatorial Guinea.
    Last Updated: June 2022
Eritrea
- Privacy Legislation:
  - The IAPP is unaware of data protection legislation in Eritrea.
    Last Updated: December 2021
Eswatini
- Privacy Legislation:
  - The IAPP is unaware of data protection legislation in Eswatani.
    Last Updated: December 2021
Ethiopia
- Privacy Legislation:
  - The IAPP is unaware of specific data protection legislation in Ethiopia.
    Last Updated: December 2021
Gabon
- Privacy Legislation:
  - DPA Legislation Page
    Authority:
  - National Commission for the Protection of Personal Data
    Last Updated: December 2021
Gambia
- Privacy Legislation:
  - The IAPP is unaware of data protection legislation in Gambia.
    Last Updated: December 2021
Ghana
- Privacy Legislation:
  - DPA Legislation Page
    Authority:
  - Data Protection Commission
    Last Updated: December 2021
Guinea
- Privacy Legislation:
  - DPA Legislation Page
    Authority:
  - Regulatory Authority for Posts and Telecommunications (not confirmed)
    Last Updated: December 2021
Guinea-Bissau
- Privacy Legislation:
  - The IAPP is unaware of data protection legislation in Guinea-Bissau.
    Last Updated: December 2021
Ivory Coast
- Privacy Legislation:
  - Law No. 2013-450 (In-Language, English)
  - DPA Legislation Page
    Authority:
  - The Telecommunications/ICT Regulatory Authority (ARTCI)
    Last Updated: December 2021
Kenya
- Privacy Legislation:
  - The Data Protection Act, 2019
  - The Data Protection (General) Regulations, 2021
    Authority:
  - Office of the Data Protection Commissioner
    Last Updated: December 2021
Lesotho
- Privacy Legislation:
  - Data Protection Act, 2011
    Authority:
  - The IAPP is unaware of an established data protection authority.
    Last Updated: December 2021
Liberia
- Privacy Legislation:
  - The IAPP is unaware of data protection legislation in Liberia.
    Last Updated: December 2021
Libya
- Privacy Legislation:
  - The IAPP is unaware of data protection legislation in Libya.
    Last Updated: December 2021
Madagascar
- Privacy Legislation:
  - Law No. 2014-038
    Authority:
  - The IAPP is unaware of an established data protection authority.
    Last Updated: December 2021
Malawi
- Privacy Legislation:
  - Malawi is reportedly considering a Data Protection and Privacy Bill.
    Last Updated: December 2021
Mali
- Privacy Legislation:
  - DPA Texts and Decisions
    Authority:
  - Mali Personal Data Protection Authority (APDP)
    Last Updated: December 2021
Mauritania
- Privacy Legislation:
  - Law No. 2017-020 on Personal Data Protection (not yet in effect)
    Authority:
  - The IAPP is unaware of an established data protection authority for Mauritania.
    Last Updated: December 2021
Mauritius
- Privacy Legislation/Authority:
  - Data Protection Office
    Last Updated: December 2021
Morocco
- Privacy Legislation:
  - DPA Legislation Page
    Authority:
  - The National Commission for the Protection of Personal Data (CNDP)
    Last Updated: December 2021
Mozambique
- Privacy Legislation:
  - The IAPP is unaware of specific data protection legislation in Mozambique.
    Last Updated: December 2021
Namibia
- Privacy Legislation:
  - The IAPP is unaware of data protection legislation in Namibia.
    Last Updated: December 2021
Niger
- Privacy Legislation:
  - DPA National Legislation Page
    Authority:
  - High Authority for the Protection of Personal Data (HAPDP)
    Last Updated: December 2021
Nigeria
- Privacy Legislation:
  - NITDA Regulations Page
  - Nigeria Data Protection Bureau Resources Page
    Authority:
  - The National Information Technology Development Agency (NITDA)
  - In February 2022, Nigeria's president approved the Nigeria Data Protection Bureau and appointed Dr. Olatunji as National Commissioner.
    Additional Resources:
  - Nigeria is included in the IAPP's "Global Comprehensive Privacy Law Mapping Chart."
    Last Updated: February 2022
Rwanda
- Privacy Legislation:
  - Law No. 058/2021 Relating to the Protection of Personal Data and Privacy
    Authority:
  - The IAPP is unaware of an established data protection authority for Rwanda.
    Last Updated: December 2021
São Tomé and Príncipe
- Privacy Legislation/Authority:
  - National Personal Data Protection Agency (ANPDP)
    Last Updated: December 2021
Senegal
- Privacy Legislation/Authority:
  - Personal Data Protection Commission (CDP)
    Last Updated: December 2021
Seychelles
- Privacy Legislation:
  - Data Protection Act (not yet in force)
    Authority:
  - The IAPP is unaware of an established data protection authority for Seychelles.
    Last Updated: December 2021
Sierra Leone
- Privacy Legislation:
  - The IAPP is unaware of data protection legislation in Sierra Leone.
    Last Updated: December 2021
Somalia
- Privacy Legislation:
  - The IAPP is unaware of data protection legislation in Somalia.
    Last Updated: December 2021
South Africa
- Privacy Legislation:
  - DPA Legislation Page
    Authority:
  - Information Regulator
    Additional Resources:
  - South Africa is included in the IAPP's "Global Comprehensive Privacy Law Mapping Chart."
    Last Updated: December 2021
South Sudan
- Privacy Legislation:
  - The IAPP is unaware of data protection legislation in South Sudan.
    Last Updated: December 2021
Sudan
- Privacy Legislation:
  - The IAPP is unaware of data protection legislation in Sudan.
    Last Updated: December 2021
Tanzania
- Privacy Legislation:
  - Tanzania is reportedly working on draft data protection legislation.
    Last Updated: December 2021
Togo
- Privacy Legislation:
  - Law No. 2019-014 on Protection of Personal Data
    Authority:
  - The IAPP is unaware of an established data protection authority for Togo.
    Last Updated: December 2021
Tunisia
- Privacy Legislation:
  - DPA Documents
    Authority:
  - National Authority for the Protection of Personal Information (INPDP)
    Last Updated: December 2021
Uganda
- Privacy Legislation:
  - DPA Legislation Page
    Authority:
  - Personal Data Protection Office
    Last Updated: December 2021
Zambia
- Privacy Legislation:
  - Legislation Page
  - Data Protection Act, 2021
    Authority:
  - The Office of the Data Protection Commissioner is not yet established.
    Last Updated: December 2021
Zimbabwe
- Privacy Legislation:
  - Data Protection Act
    Authority:
  - Postal and Telecommunications Regulatory Authority (POTRAZ)
    Last Updated: December 2021

Privacy Resources for Territories

North America Privacy Resources

Oceania Privacy Resources

Asia Privacy Resources

South America Privacy Resources