Mozambique

Mozambique has no enacted data protection legislation. A Personal Data Protection Bill has been developed by the National Institute of Information and Communication Technologies (INTIC) through a consultative process that intensified during 2025: INTIC opened a public consultation on the draft in September 2025, convened with the Council of Europe in October 2025 to align the Bill with international standards, and circulated revised provisions in November 2025. As of June 2026 the Bill remains in technical harmonisation and ministerial review and has not been enacted. The Bill proposes a framework grounded in internationally recognised principles (lawfulness, purpose limitation, data minimisation, accuracy, storage limitation, accountability) and would grant data subjects rights of access, rectification, erasure, portability, and objection to automated decision-making. It would establish a dedicated supervisory authority under INTIC oversight with powers to investigate, issue guidance, enforce compliance, and impose administrative sanctions, and proposes breach-notification obligations and cross-border transfer restrictions. No dedicated data protection supervisory authority has yet been established, and no primary text has been located from official government sources. Until the Bill passes the Council of Ministers and the Assembly of the Republic, Mozambique has no statutory data protection regime and no supervisory enforcement, although the engagement with the Council of Europe and the 2025 consultation momentum suggest enactment may not be far off.