← Topics
Data Protection
ActiveData Protection
Data protection and privacy legislation across African jurisdictions — rights, obligations, and enforcement.
Last updated: 1 June 2026
93instruments
12cases
49jurisdictions
Instruments
dz-const-privacyConstitution of the People's Democratic Republic of Algeria, 2020, Article 47 (Privacy of correspondence and communications, and protection of personal data)
Algeriadj-const-privacyConstitution of the Republic of Djibouti, 1992 (as amended), Inviolability of the secrecy of correspondence and communications, and freedom of expression
Djiboutiss-const-privacyTransitional Constitution of the Republic of South Sudan, 2011, Articles 22 & 24 (Right to privacy and freedom of expression and media)
South Sudankm-const-privacyConstitution of the Union of the Comoros, 2018, Article 27 (Confidentiality of correspondence, telecommunications and computer data) and freedom of expression
Comorosbi-const-privacyConstitution of the Republic of Burundi, 2018, Articles 31 & 43 (Freedom of expression and right to privacy of correspondence and communications)
Burundisc-const-privacyConstitution of the Republic of Seychelles, 1993, Articles 20, 22 & 28 (Right to privacy, freedom of expression and access to official information)
Seychellesso-const-privacyProvisional Constitution of the Federal Republic of Somalia, 2012, Article 19 (Freedom of expression including electronic media) and the right to privacy
Somaliasc-ati-2018Access to Information Act, 2018 (Act No. 4 of 2018) (Seychelles)
Seychelleset-const-privacyConstitution of the Federal Democratic Republic of Ethiopia, 1995, Articles 26 & 29 (Right to privacy of communications and freedom of expression)
Ethiopiaug-ati-2005The Access to Information Act, 2005 (Act No. 6 of 2005) (Uganda)
Ugandaug-const-privacyConstitution of the Republic of Uganda, 1995, Article 27 (Right to privacy of person, home, correspondence and communication)
Ugandatz-const-privacyConstitution of the United Republic of Tanzania, 1977, Articles 16 & 18 (Right to privacy of communications and freedom of expression/information)
Tanzaniatz-ati-2016The Access to Information Act, 2016 (Act No. 6 of 2016) (Tanzania)
Tanzaniamg-const-privacyConstitution of the Fourth Republic of Madagascar, 2010, Article 13 (Inviolability of the person, the home and secrecy of correspondence)
Madagascareg-const-privacyConstitution of the Arab Republic of Egypt, 2014, Article 57 (Inviolability of private life and confidentiality of communications)
Egyptrw-const-privacyConstitution of the Republic of Rwanda of 2003 (revised in 2015), Article 23 (Privacy and confidentiality of correspondence and communication)
Rwandagh-const-privacyConstitution of the Republic of Ghana, 1992, Article 18(2) (Privacy of correspondence and communication)
Ghanake-const-privacyConstitution of Kenya, 2010, Article 31 (Right to Privacy, including privacy of communications)
Kenyake-ati-2016Access to Information Act, 2016 (No. 31 of 2016)
Kenyang-const-privacyConstitution of the Federal Republic of Nigeria, 1999, Section 37 (Right to Privacy, including correspondence and communications)
Nigeriacv-const-digitalrightsConstituição da República de Cabo Verde, Artigo 45.º (Utilização de meios informáticos e protecção de dados pessoais) e Artigo 48.º (Liberdades de expressão e de informação) (Constitution of the Republic of Cabo Verde, constitutional protection of digital privacy/data and freedom of expression and information)
Cabo Verdeza-paia-2000Promotion of Access to Information Act 2 of 2000 (PAIA)
South Africaza-const-privacyConstitution of the Republic of South Africa, 1996, Section 14 (Right to Privacy, including privacy of communications)
South Africaeg-cyber-2018Anti-Cyber and Information Technology Crimes Law No. 175 of 2018
Egyptrw-cyber-2018Law N° 60/2018 of 22/08/2018 on Prevention and Punishment of Cyber Crimes
Rwandang-cyber-2015Cybercrimes (Prohibition, Prevention, Etc.) Act, 2015
Nigeriaza-cyber-2020Cybercrimes Act 19 of 2020
South Africagh-cyber-2020Cybersecurity Act, 2020 (Act 1038)
Ghanake-cyber-2018Computer Misuse and Cybercrimes Act, 2018 (No. 5 of 2018)
Kenyang-openbanking-2023Operational Guidelines for Open Banking in Nigeria
Nigeriang-openbankingframework-2021Regulatory Framework for Open Banking in Nigeria
Nigeriaao-ai-2025Proposta de Lei sobre a Inteligência Artificial (Draft Law on Artificial Intelligence)
Angolaza-popia-regs-2018Regulations relating to the Protection of Personal Information, 2018 (POPIA Regulations) (South Africa)
South Africaci-decret-2015-79Décret n° 2015-79 du 4 février 2015 (declaration and authorisation procedures for personal data processing) (Côte d'Ivoire)
Côte d'Ivoirezw-licensing-regs-2024Cyber and Data Protection (Licensing of Data Controllers and Appointment of Data Protection Officers) Regulations, 2024 (SI 155 of 2024) (Zimbabwe)
Zimbabwetn-decret-2007-3004Décret n° 2007-3004 du 27 novembre 2007 (conditions and procedures for declaration and authorisation) (Tunisia)
Tunisiaug-dpp-regs-2021Data Protection and Privacy Regulations, 2021 (SI No. 21 of 2021) (Uganda)
Ugandazm-reg-licensing-regs-2021Data Protection (Registration and Licensing) Regulations, 2021 (SI No. 58 of 2021) (Zambia)
Zambiabj-digital-code-2018Loi N° 2017-20 du 20 avril 2018 portant Code du numérique (Digital Code of Benin)
Beninmw-etcsa-2016Electronic Transactions and Cyber Security Act, 2016 (No. 33 of 2016) (Malawi)
Malawidz-law-25-11-2025Law No. 25-11 of 24 July 2025 amending Law No. 18-07 on Personal Data Protection (Algeria)
Algeriane-law-2023-31Law No. 2023-31 of 4 July 2023 amending Law No. 2022-59 on Personal Data Protection (Niger)
Nigerdj-digital-code-2025Loi portant Code du numérique (Digital Code) (Djibouti)
Djiboutils-dpa-2011Data Protection Act, 2011 (Act No. 5 of 2012) (Lesotho)
Lesothokm-pdp-2021Loi relative à la protection des données à caractère personnel (Comoros Personal Data Protection Act 2021)
Comorosgq-pdpl-2016Personal Data Protection Law No. 1/2016 of 22 July 2016 (Equatorial Guinea)
Equatorial Guineaet-pdpp-2024Personal Data Protection Proclamation No. 1321/2024 (Ethiopia)
Ethiopiast-pdp-2016Lei n.º 3/2016 and Decreto-Lei n.º 4/2017 on Personal Data Protection (São Tomé and Príncipe)
São Tomé and Príncipetd-pdpl-2015Law No. 007/PR/2015 on the Protection of Personal Data (Chad)
Chadso-dpa-2023Data Protection Act, 2023 (Law No. 005 of 2023) (Somalia)
Somaliasc-dpa-2023Data Protection Act, 2023 (Seychelles)
Seychellescd-dc-2023Ordonnance-Loi n° 23/010 du 13 mars 2023 portant code du numérique (Decree-Law No. 23/010 of 13 March 2023 on the Digital Code)
Congo (DRC)ga-dp-2011Loi n° 001/2011 du 25 septembre 2011 relative à la protection des données à caractère personnel (Law No. 001/2011 of 25 September 2011 on the Protection of Personal Data)
Gaboncg-dp-2019Loi n° 29-2019 du 10 octobre 2019 portant protection des données à caractère personnel (Law No. 29-2019 of 10 October 2019 on the Protection of Personal Data)
Congo (Republic)cm-cyber-2010Loi n° 2010/012 du 21 décembre 2010 relative à la cybersécurité et à la cybercriminalité (Law No. 2010/012 of 21 December 2010 on Cybersecurity and Cybercriminality)
Camerooncm-pdpa-2024Law No. 2024/017 of 23 December 2024 relating to Personal Data Protection
Cameroonzm-dpa-2021Data Protection Act, 2021
Zambiamz-pdpb-2025Personal Data Protection Bill
Mozambiquesz-dpa-2022Data Protection Act, 2022
Eswatinizw-cdpa-2021Cyber and Data Protection Act [Chapter 12:07]
Zimbabwema-dp-2009Loi n° 09-08 relative à la protection des personnes physiques à l’égard du traitement des données à caractère personnel (Law No. 09-08 on the Protection of Individuals with regard to the Processing of Personal Data)
Moroccotn-dp-2004Loi organique n° 2004-63 du 27 juillet 2004 portant sur la protection des données à caractère personnel (Organic Law No. 2004-63 of 27 July 2004 on the Protection of Personal Data)
Tunisiadz-dp-2018Loi n° 18-07 du 10 juin 2018 relative à la protection des personnes physiques dans le traitement des données à caractère personnel (Law No. 18-07 of 10 June 2018 on the Protection of Natural Persons in the Processing of Personal Data)
Algeriaao-dp-2011Law 22/11 on the Protection of Personal Data
Angolana-dpb-2025Data Protection Bill
Namibiamw-dpa-2024Data Protection Act, 2024
Malawibw-dpa-2024Data Protection Act, 2024
Botswanamg-dp-2014Loi n° 2014-038 sur la protection des données à caractère personnel
Madagascarug-dppa-2019Data Protection and Privacy Act 2019
Ugandamu-dpa-2017Data Protection Act 2017
Mauritiustz-pdpa-2022Personal Data Protection Act, 2022
Tanzaniatg-dp-2019Loi N° 2019-014 du 29 octobre 2019 relative à la protection des données à caractère personnel (Togo Personal Data Protection Act 2019)
Togosl-dp-draftData Protection and Right to Access Information Bill, 2025 (Sierra Leone)
Sierra Leonesn-dp-2008Loi N° 2008-12 du 25 janvier 2008 portant sur la protection des données à caractère personnel (Senegal Personal Data Protection Act 2008)
Senegalne-dp-2022Loi N° 2022-59 du 16 décembre 2022 relative à la protection des données à caractère personnel (Niger Personal Data Protection Act 2022)
Nigermr-dp-2017Loi N° 2017-020 du 22 juillet 2017 sur la protection des données à caractère personnel (Mauritania Personal Data Protection Act 2017)
Mauritaniaml-dp-2013Loi N° 2013-015 du 21 mai 2013 portant protection des données à caractère personnel en République du Mali (Mali Personal Data Protection Act 2013)
Malilr-dp-draftAn Act for the Collection, Processing, Transmission, Storage, Protection, and Use of Personal Information in Liberia (Draft Data Protection Bill)
Liberiagn-csdp-2016Loi N° L/2016/037/AN du 28 juillet 2016 relative à la cybersécurité et à la protection des données à caractère personnel (Guinea Cybersecurity and Personal Data Protection Act 2016)
Guineagm-pdpp-2025Personal Data Protection and Privacy Act, 2025
Gambiaci-dp-2013Loi N° 2013-450 du 19 juin 2013 relative à la protection des données à caractère personnel (Côte d'Ivoire Personal Data Protection Act 2013)
Côte d'Ivoirecv-dp-2001Lei n.º 133/V/2001 de 22 de Janeiro relativa à protecção de dados pessoais (Cabo Verde Data Protection Act 2001, as amended)
Cabo Verdebf-dp-2021Loi N° 001-2021/AN du 30 mars 2021 portant protection des personnes à l'égard du traitement des données à caractère personnel (Burkina Faso Personal Data Protection Act 2021)
Burkina Fasobj-dp-2009Loi N° 2009-09 du 22 mai 2009 portant protection des données à caractère personnel (Benin Personal Data Protection Act 2009)
Beninrw-dpl-2021Law N° 058/2021 of 13/10/2021 Relating to the Protection of Personal Data and Privacy
Rwandaeg-pdpl-2020Personal Data Protection Law No. 151 of 2020
Egypteg-pdpl-er-2025Executive Regulations to the Personal Data Protection Law No. 151 of 2020 (Decree No. 816 of 2025)
Egyptgh-dpa-2012Data Protection Act, 2012 (Act 843)
Ghanaza-popia-2013Protection of Personal Information Act 4 of 2013
South Africake-dpa-2019Data Protection Act, 2019
Kenyake-dpgr-2021Data Protection (General) Regulations, 2021
Kenyang-ndpr-2019Nigeria Data Protection Regulation, 2019
Nigeriang-ndpa-2023Nigeria Data Protection Act, 2023
Nigeria