Burundi
East Africa
Burundi has no comprehensive personal data protection law. A June 2026 verification search confirmed that there is no dedicated data protection statute in force and no national data protection authority. ATLPF holds no Instrument or Regulator record for the jurisdiction, consistent with that finding. No draft bill at an advanced or publicly confirmed stage has been identified, and no sector-specific or incidental data protection provisions of note were located in the available sources. For anyone assessing data-handling obligations in Burundi, the practical position is that there is no statutory data protection regime, no registration or breach-notification requirements, and no supervisory enforcement; data-related rights, if any, would have to be grounded in general constitutional privacy protections rather than a dedicated framework.
| Topic | Instruments | Cases | Coverage |
|---|---|---|---|
| Data Protection | 1 | 0 | ◐ |
| AI Governance | 1 | 0 | ◐ |
| Fintech | 3 | 0 | ◐ |
| Cybercrime | 1 | 0 | ◐ |
| Digital Rights | 1 | 0 | ◐ |
| Platform Liability | 0 | 0 | ○ |
| Telecoms | 0 | 0 | ○ |
● Covered ◐ Partially covered ○ Not yet covered
Constitution of the Republic of Burundi, 2018, Articles 31 & 43 (Freedom of expression and right to privacy of correspondence and communications)
Enacted 7 Jun 2018
Loi N°1/10 du 16 mars 2022 portant prévention et répression de la cybercriminalité au Burundi
Enacted 16 Mar 2022
Circulaire N° 001 de 2024 relative aux activités des établissements de paiement émetteurs de monnaie électronique (Circular No. 001 of 2024 on the Activities of Electronic Money-Issuing Payment Establishments) (Burundi)
Enacted 1 Sept 2024
Règlement N° 003 de 2024 relatif aux activités des agents commerciaux en opérations de banque et services de paiement (Regulation No. 003 of 2024 on the Activities of Commercial Agents in Banking Operations and Payment Services) (Burundi)
Enacted 1 Sept 2024
Règlement N° 002 de 2024 relatif aux services de paiement et activités des établissements de paiement (Regulation No. 002 of 2024 on Payment Services and the Activities of Payment Establishments) (Burundi)
Enacted 1 Sept 2024
National Artificial Intelligence Strategy 2026-2030 (Stratégie Nationale de l'Intelligence Artificielle)
Enacted 21 Apr 2026
The gap is the complete absence of any data protection law or supervisory authority. No advanced draft bill or sectoral data protection provisions were identified on file or in verification searching.