Djibouti
East Africa
Djibouti enacted a comprehensive data protection regime in 2025. Its Digital Code, adopted on 30 June 2025, embeds a modern GDPR-style personal data protection framework within a broad 156-article digital statute, structurally similar to the Democratic Republic of the Congo's consolidated-code approach. The data protection provisions are now recorded in ATLPF's Instruments database (AI-draft). The Code establishes privacy-by-design obligations, data minimisation by default, and a 72-hour breach-notification duty; requires prior authorisation for health-research processing; and creates numerous criminal offences with penalties reaching ten years' imprisonment and fines up to 35,000,000 DJF. It designates the Commission Nationale de Protection des Données Personnelles (CNDP) as an independent, administratively and financially autonomous, multi-stakeholder supervisory authority. The decisive limitation is institutional: as at June 2026 the CNDP has not yet been operationally established, so no Regulator record is on file. Djibouti therefore scores in the one-instrument-without-an-operational-regulator band, alongside the DRC, a strong statute awaiting a functioning supervisor. The record is AI-drafted from a June 2026 verification search.
| Topic | Instruments | Cases | Coverage |
|---|---|---|---|
| Data Protection | 2 | 0 | ◐ |
| AI Governance | 0 | 0 | ○ |
| Fintech | 1 | 0 | ◐ |
| Cybercrime | 1 | 0 | ◐ |
| Digital Rights | 1 | 0 | ◐ |
| Platform Liability | 0 | 0 | ○ |
| Telecoms | 0 | 0 | ○ |
● Covered ◐ Partially covered ○ Not yet covered
Constitution of the Republic of Djibouti, 1992 (as amended), Inviolability of the secrecy of correspondence and communications, and freedom of expression
Enacted 4 Sept 1992
Instruction n° 2017-01 relative à la monnaie électronique (Instruction No. 2017-01 on Electronic Money) (Djibouti)
Loi portant Code du numérique (Digital Code) (Djibouti)
Enacted 30 Jun 2025
The CNDP is designated but not yet constituted, so there is no operational supervisory enforcement and no Regulator record on file. The Instrument record is AI-drafted and detailed provisions await confirmation against the official Journal Officiel text.