Personal Data Protection Bill

Mozambique does not yet have enacted data protection legislation. A Personal Data Protection Bill has been developed by the National Institute of Information and Communication Technologies (INTIC) through a consultative process that intensified significantly during 2025. In September 2025, INTIC opened a public consultation on the draft Bill covering the processing of personal data by public and private entities. In October 2025, INTIC convened with the Council of Europe to ensure that the Bill aligns with international standards. Updated and revised draft provisions were circulated in November 2025 following input received during the consultation period. Following the close of public consultation, the Bill is expected to undergo technical harmonisation among government ministries before submission for consideration by the Ministry of Communications and Digital Transformation, approval by the Council of Ministers, and ultimately passage through the Assembly of the Republic. As of June 2026, the Bill remains in the technical harmonisation and ministerial review phase and has not been enacted. No dedicated data protection supervisory authority has been established in Mozambique. The Bill proposes a framework grounded in internationally recognised data protection principles, including lawfulness, purpose limitation, data minimisation, accuracy, storage limitation, and accountability. It would grant data subjects rights of access, rectification, erasure, portability, and objection to automated decision-making. The proposed legislation would establish a dedicated supervisory authority under INTIC oversight, with powers to investigate, issue guidance, enforce compliance, and impose administrative sanctions. Data breach notification obligations for controllers and restrictions on cross-border data transfers are also proposed. Sourcing note: no direct URL to the official bill text has been identified from primary government sources. Full text may be available through INTIC directly. The entry should be updated with a primary source URL when available.

1. 1Bill proposes establishment of a dedicated supervisory authority under INTIC oversight with investigative and enforcement powers
2. 2Would apply to processing of personal data by public and private entities in Mozambique
3. 3Proposes data processing principles aligned with international standards (lawfulness, purpose limitation, minimisation, accuracy, storage limitation)
4. 4Data subject rights proposed including access, rectification, erasure, portability, and objection to automated profiling
5. 5Breach notification obligations proposed for data controllers
6. 6Cross-border data transfer restrictions proposed
7. 7Public consultation closed November 2025; Bill in technical harmonisation phase as of June 2026; not yet enacted