Sudan

Sudan has no comprehensive personal data protection law. A June 2026 verification search confirmed the absence of a dedicated data protection statute and of any independent data protection authority to oversee privacy compliance; ATLPF holds no Instrument or Regulator record for the jurisdiction. The absence is consequential in practice: commentary on data handling in Sudan, for example in the humanitarian and refugee context, highlights that the lack of a comprehensive framework leaves personal data without statutory safeguards or an oversight body. No advanced, publicly confirmed draft data protection bill has been identified, and the country's ongoing conflict and institutional disruption make near-term legislation unlikely. For anyone assessing data-handling obligations in Sudan, the practical position is that there is no statutory data protection regime, no registration or breach-notification requirements, and no supervisory enforcement; any privacy protection would rest on general constitutional commitments rather than a dedicated framework.