Eritrea
East Africa
Eritrea has no comprehensive personal data protection law. A June 2026 verification search confirmed that there is no dedicated data protection statute in force, no national data protection authority, and, according to comparative surveys, not even proposed draft legislation on cybercrime or data protection. ATLPF holds no Instrument or Regulator record for the jurisdiction, consistent with that finding. Eritrea is among the small group of African states with no data protection framework of any kind and no publicly identifiable legislative process underway to create one. For anyone assessing data-handling obligations in the country, the practical position is that there is no statutory data protection regime, no registration or breach-notification requirements, and no supervisory enforcement; the legal and digital-governance environment more broadly is highly constrained.
| Topic | Instruments | Cases | Coverage |
|---|---|---|---|
| Data Protection | 0 | 0 | ○ |
| AI Governance | 0 | 0 | ○ |
| Fintech | 0 | 0 | ○ |
| Cybercrime | 0 | 0 | ○ |
| Digital Rights | 0 | 0 | ○ |
| Platform Liability | 0 | 0 | ○ |
| Telecoms | 0 | 0 | ○ |
● Covered ◐ Partially covered ○ Not yet covered
The gap is total: no data protection law, no draft bill, and no supervisory authority. There is also no identifiable adjacent cybercrime or electronic-transactions framework that would carry incidental data protection provisions.