04:05 AFRICA
Overview of the Laws Developed in 2025
Establishment of new data protection authorities (DPAs) or designation of existing bodies: The Republic of Congo and Togo established standalone authorities, operationalised in March. Malawi designated the Malawi Communications Regulatory Authority as its DPA in January, and the Gambia designated its Information Commission. Sudan established the Sudanese Data and Artificial Intelligence Authority, creating an oversight body even before enacting a primary data protection law. Somalia and Tanzania
Implementation guidance & operational clarity: Nigeria issued a General Application and Implementation Directive. South Africa published amendments clarifying rights to object, erasure, and rectification. Egypt published its long-awaited executive regulation, fully operationalising its 2020 data protection law. Kenya published eight guidance notes covering children’s data, biometric data, journalism, and other areas. Algeria released a compliance package including guidelines and templates. Zambia, Zimbabwe, and Malawi published registration guidelines and operational regulations.
New or updated data protection laws: Djibouti adopted its Digital Code in June, incorporating a data protection law. The Gambia enacted its first personal data protection law. Botswana’s amended Data Protection Act came into effect in January. Algeria completed introducing new DPO obligations and stricter breach notification timelines. Amendment processes are underway in Angola, Ghana, Kenya, Mauritius, Nigeria, and Senegal. amendments to its existing law,
were admitted as members of the
Network of African Data Protection Authorities (NADPA).
58 I 04:05
GLOBAL PAYROLL MAGAZINE ISSUE 22
Made with FlippingBook - Share PDF online