ADT Africa Data Talk
Africa Data Talk
The pan-African media dedicated to data, AI and cybersecurity

Decoding Data Governance, Cybersecurity & AI across Africa.

Africa Data Talk (ADT) is the independent media outlet that turns compliance, cybersecurity, data protection and AI into visual analysis you can use straight away.

100%
Focused on the African ecosystem
4 Pillars
Governance • Cyber • Compliance • AI
Weekly
Monitoring & Strategic Analysis
Pan-African Compliance Directory

Observatory of African Laws on Data Protection

A complete executive tool for DPOs, lawyers and CISOs. Filter by region to review the 45 reference laws, the data protection authorities (DPAs) and the regulatory specifics of each country.

🇩🇿 Act 18-07

Algeria

Act on the protection of natural persons

Regulator:ANPDP
Max. penalty:DZD 5M & imprisonment
Key specificity:Prior authorisation required for transfers out of Algeria.
View Profile & Legal Texts (PDF)
🇦🇴 Lei 22/11

Angola

Lei da Protecção de Dados Pessoais

Regulator:APD Angola
Max. penalty:APD fines & processing ban
Key specificity:Draft AI Act (Proposta de Lei 2025) moving through adoption.
View Profile & Legal Texts (PDF)
🇧🇯 Digital Code

Benin

Book V of the Digital Code

Regulator:APDP
Max. penalty:XOF 100M & licence withdrawal
Key specificity:Paperless circular & prior APDP authorisation.
View Profile & Legal Texts (PDF)
🇧🇼 DPA 2018

Botswana

Data Protection Act 2018

Regulator:Info Regulator BW
Max. penalty:BWP 500k or 9 years' imprisonment
Key specificity:Strict rules on the processing of health data.
View Profile & Legal Texts (PDF)
🇧🇫 ARCOD Act 2026

Burkina Faso

ARCOD Act & Act No. 001-2021/AN

Regulator:ARCOD / CIL
Max. penalty:XOF 100M & inspections
Key specificity:Single regulator for media, telecoms & data.
View Profile & Legal Texts (PDF)
🇧🇮 Act 1/06 (2022)

Burundi

Data Protection Act

Regulator:ANCDP
Max. penalty:Criminal fines & licence withdrawal
Key specificity:Tight controls on sub-regional EAC transfers.
View Profile & Legal Texts (PDF)
🇨🇻 Lei 133/2013

Cape Verde

Lei de Proteção de Dados Pessoais

Regulator:CNPD Cape Verde
Max. penalty:CNPD financial penalties
Key specificity:African pioneer (since 2001) and Convention 108+ signatory.
View Profile & Legal Texts (PDF)
🇨🇲 Acts 2024 & 2010

Cameroon

Data Protection Act 2024 / Cybercrime Act 2010

Regulator:ART Cameroon
Max. penalty:Criminal penalties & fines
Key specificity:New act adopted plus the sovereign 'GPT Cameroon' AI project.
View Profile & Legal Texts (PDF)
🇨🇫 Act 24.008

CAR (Central African Republic)

Electronic communications & data Act

Regulator:ARTP CAR
Max. penalty:ARTP fines
Key specificity:CEMAC harmonisation framework on cybercrime.
View Profile & Legal Texts (PDF)
🇹🇩 Act 007/2015

Chad

Act on the protection of personal data

Regulator:ADETIC / AMA
Max. penalty:Administrative sanctions
Key specificity:Mandatory notifications for telecom operators.
View Profile & Legal Texts (PDF)
🇰🇲 Act 14-022

Comoros

Information Society Act

Regulator:ANRTIC
Max. penalty:ANRTIC fines
Key specificity:Centralised governance of ICT & personal data.
View Profile & Legal Texts (PDF)
🇨🇬 Act 29-2019

Republic of the Congo

Personal Data Protection Act

Regulator:ARPCE
Max. penalty:XAF 15M & suspension
Key specificity:National register of notifications run by ARPCE.
View Profile & Legal Texts (PDF)
🇨🇮 Act 2013-450

Côte d'Ivoire

Data Protection Act

Regulator:ARTCI
Max. penalty:Suspension of processing
Key specificity:72-hour breach notification & DPO accreditation.
View Profile & Legal Texts (PDF)
🇩🇯 Act No. 13/2013

Djibouti

Information Society Act

Regulator:MPTIC Djibouti
Max. penalty:Regulatory fines
Key specificity:Rules applied to submarine cable hubs.
View Profile & Legal Texts (PDF)
🇪🇬 Law 151/2020

Egypt

Personal Data Protection Law

Regulator:PDPCB
Max. penalty:EGP 5M & imprisonment
Key specificity:FAIR guidelines for AI & transfer permits.
View Profile & Legal Texts (PDF)
🇸🇿 DPA 2022

Eswatini

Data Protection Act 2022

Regulator:ESCCOM
Max. penalty:SZL 1M & criminal penalty
Key specificity:Rapid breach notification required.
View Profile & Legal Texts (PDF)
🇪🇹 Proclamation 2024

Ethiopia

Personal Data Protection Proclamation

Regulator:EBCA / ECA
Max. penalty:ECA financial penalties
Key specificity:Rules framing telecom liberalisation & Telebirr.
View Profile & Legal Texts (PDF)
🇬🇦 Act 001/2011

Gabon

Personal Data Protection Act

Regulator:CNPDCP Gabon
Max. penalty:XAF 100M & licence withdrawal
Key specificity:Prior authorisation for biometrics & video surveillance.
View Profile & Legal Texts (PDF)
🇬🇲 DPA 2019

The Gambia

Data Protection & Privacy Act

Regulator:PURA Gambia
Max. penalty:PURA fines
Key specificity:Alignment with ECOWAS community rules.
View Profile & Legal Texts (PDF)
🇬🇭 Act 843 (2012)

Ghana

Data Protection Act 2012

Regulator:DPC Ghana
Max. penalty:DPC fines & prosecution
Key specificity:Mandatory DPO registration & Emerging Tech Bill 2025.
View Profile & Legal Texts (PDF)
🇬🇳 Act 2016/037

Guinea

Cybersecurity & Data Act

Regulator:APIP / ARPT
Max. penalty:Administrative penalties
Key specificity:Prior notification procedures for companies.
View Profile & Legal Texts (PDF)
🇰🇪 DPA 2019

Kenya

Data Protection Act 2019

Regulator:ODPC Kenya
Max. penalty:KES 5M or 1% of turnover
Key specificity:AI Bill 2026, Mulla Pride enforcement & the NSE AI ETF.
View Profile & Legal Texts (PDF)
🇱🇸 Act 5/2012

Lesotho

Data Protection Act 2012

Regulator:LCA Lesotho
Max. penalty:LCA financial penalties
Key specificity:Oversight of telecom services & banking data.
View Profile & Legal Texts (PDF)
🇲🇬 Act 2014-038

Madagascar

Act on the protection of personal data

Regulator:CMIL Madagascar
Max. penalty:Fines & withdrawal of registration
Key specificity:Strict audits of the call centre & BPO sector.
View Profile & Legal Texts (PDF)
🇲🇼 DPA 2023

Malawi

Data Protection Act 2023

Regulator:MACRA Malawi
Max. penalty:MWK 5M & criminal penalty
Key specificity:Fast-track compliance for mobile money players.
View Profile & Legal Texts (PDF)
🇲🇱 Act 2013-015

Mali

Personal Data Protection Act

Regulator:APDP Mali
Max. penalty:XOF 20M & APDP sanctions
Key specificity:Mandatory notifications for banks & telecoms.
View Profile & Legal Texts (PDF)
🇲🇷 Act 2017-020

Mauritania

Information Society Act

Regulator:APDP Mauritania
Max. penalty:APDP regulatory fines
Key specificity:Adherence to the principles of Convention 108+.
View Profile & Legal Texts (PDF)
🇲🇺 DPA 2017

Mauritius

Data Protection Act 2017

Regulator:DPO Mauritius
Max. penalty:MUR 200k & 5 years' imprisonment
Key specificity:Near-full GDPR alignment & FAIR guidelines for AI.
View Profile & Legal Texts (PDF)
🇲🇦 Act 09-08

Morocco

Protection of natural persons

Regulator:CNDP Morocco
Max. penalty:MAD 300k & closure
Key specificity:Convention 108+ signatory & reinforced national register.
View Profile & Legal Texts (PDF)
🇳🇪 Act 2017-28

Niger

Personal Data Protection Act

Regulator:HAPDP Niger
Max. penalty:XOF 10M & sanctions
Key specificity:Regulation of civil-registry biometric data.
View Profile & Legal Texts (PDF)
🇳🇬 NDPA 2023

Nigeria

Nigeria Data Protection Act

Regulator:NDPC Nigeria
Max. penalty:2% of gross turnover
Key specificity:Mandatory annual audits & MultiChoice penalty (NGN 766M).
View Profile & Legal Texts (PDF)
🇷🇼 Law 058/2021

Rwanda

Law on Personal Data Protection

Regulator:NISA / DP-EO
Max. penalty:RWF 10M or 2% of turnover
Key specificity:Public data localisation & DPO registration.
View Profile & Legal Texts (PDF)
🇸🇹 Lei 03/2016

São Tomé and Príncipe

Lei de Proteção de Dados Pessoais

Regulator:CNPD São Tomé
Max. penalty:CNPD fines
Key specificity:Framework for island-to-island transfers.
View Profile & Legal Texts (PDF)
🇸🇳 Act 2008-12

Senegal

Personal Data Act

Regulator:CDP Senegal
Max. penalty:XOF 100M & criminal penalties
Key specificity:Francophone pioneer & Convention 108+ signatory.
View Profile & Legal Texts (PDF)
🇸🇨 DPA 2023

Seychelles

Data Protection Act 2023

Regulator:DPC Seychelles
Max. penalty:SCR 500k & suspension
Key specificity:Rules tailored to the offshore & financial sector.
View Profile & Legal Texts (PDF)
🇸🇱 DPA 2023

Sierra Leone

Data Protection Act 2023

Regulator:NATCOM SL
Max. penalty:NATCOM fines
Key specificity:Text adopted at the Lungi Summit (ECOWAS).
View Profile & Legal Texts (PDF)
🇸🇴 DPA 2023

Somalia

Data Protection Act 2023

Regulator:NCTA Somalia
Max. penalty:NCTA fines
Key specificity:Oversight of mobile money & digital identity.
View Profile & Legal Texts (PDF)
🇿🇦 POPIA Act

South Africa

Protection of Personal Information Act

Regulator:Info Regulator SA
Max. penalty:ZAR 10M or 10 years' imprisonment
Key specificity:Strict direct-marketing opt-in & Dept of Justice enforcement.
View Profile & Legal Texts (PDF)
🇹🇿 Act 11/2022

Tanzania

Personal Data Protection Act 2022

Regulator:PDPC Tanzania
Max. penalty:TZS 100M & 5 years' imprisonment
Key specificity:Mandatory registration rules for data controllers.
View Profile & Legal Texts (PDF)
🇹🇬 Act 2019-014

Togo

Act on the protection of personal data

Regulator:IPDP Togo
Max. penalty:XOF 50M & suspension
Key specificity:Personal Data Protection Authority fully operational.
View Profile & Legal Texts (PDF)
🇹🇳 Act 2004-63

Tunisia

Act on personal data

Regulator:INPDP Tunisia
Max. penalty:Fines & criminal penalties
Key specificity:Arab/African pioneer & accession to Convention 108+.
View Profile & Legal Texts (PDF)
🇺🇬 Act 2019

Uganda

Data Protection & Privacy Act

Regulator:PDPO Uganda
Max. penalty:2% of gross turnover
Key specificity:Strict audits of banks & fintechs.
View Profile & Legal Texts (PDF)
🇨🇩 Code 23/010

DRC

Congolese Digital Code

Regulator:Ministry / DPA
Max. penalty:DGRAD fines & licence withdrawal
Key specificity:Data centre operating fees & the digital tax order.
View Profile & Legal Texts (PDF)
🇿🇲 Act 3/2021

Zambia

Data Protection Act 2021

Regulator:DPC Zambia
Max. penalty:2% of gross turnover
Key specificity:Mandatory registration of data processors.
View Profile & Legal Texts (PDF)
🇿🇼 Act 5/2021

Zimbabwe

Cyber Security & Data Protection Act

Regulator:POTRAZ
Max. penalty:Fines & criminal penalties
Key specificity:Unified cybersecurity & data protection desk under POTRAZ.
View Profile & Legal Texts (PDF)
Our Purpose

Inform, Decode & Demystify Digital Governance in Africa

On a continent in full digital acceleration, regulations are multiplying yet remain largely unknown. Africa Data Talk (ADT) is the bridge between the legal rigour of GRC compliance and the agility that tech leaders, DPOs and CISOs need.

Executive monitoring: Weekly tracking of DPA enforcement, decrees and emerging legislation.
Visual format: Carousel summaries you can use directly on LinkedIn and in board meetings.
Pan-African voice: Conversations with the continent's regulators, experts and practitioners.
"Compliance and cybersecurity should no longer be seen as brakes, but as the indispensable passport to African digital sovereignty."
ID
Ibrahim DOUMBOUYA
Founder — Africa Data Talk
Executive Audio Studio

The Africa Data Talk Podcast

Interviews and debates with the people shaping regulation, security and AI in Africa.

New episode • Live 4 min

Cyberattack in Morocco: massive data leak from the police and intelligence services

A rapid breakdown of the incident, what it means for African public administrations and the safeguards to activate right now.

Episode #1 • Live Available now

Privacy by Design: protecting data from the very start of a project

How to move from legal theory to the concrete application of the principles.

Visual Publications

Strategic Briefings & Carousels

Flip through our concise decks, built for your LinkedIn feed and your executive committees.

🚨 INTERPOL 2026 7 Slides

AI Involved in 55% of Cybercrime in Africa

Financial losses doubled to $484M, deepfakes on the rise and banking KYC controls bypassed.

Open Full Screen
🤖 AI Alert 6 Slides

OpenAI's AI Sandbox Escape

Inside the first autonomous AI intrusion incident and what it means for African fintechs.

Open Full Screen
🧠 ADP Study 8 Slides

AI Governance in Africa

The shift to hard law in Kenya, Angola, Ghana and Nigeria, plus sovereignty models such as 'GPT Cameroon'.

Open Full Screen
🇰🇪 Fintech & Markets 6 Slides

Kenya: First AI ETF on the Nairobi Exchange (NSE)

Safaricom M-Pesa integration, market access for over 1M young investors and managing bubble risk.

Open Full Screen
🇧🇫 Burkina Regulation 7 Slides

Burkina Faso: Creation of ARCOD

A single regulator for media, telecoms & data, with power to issue binding AI rules directly.

Open Full Screen
🇧🇯 Digital Admin 6 Slides

Benin: Going "Paperless"

The 24 July 2026 circular. Three GRC challenges analysed: sovereign data centres, APDP compliance & evidential value.

Open Full Screen
🛡️ Cotonou Event 6 Slides

Cyber Africa Forum Cotonou

1,500+ decision-makers gathered. Taking stock of the Benin–Côte d'Ivoire alliance & what VC funds now demand on cybersecurity.

Open Full Screen
🌍 Weekly GRC Brief 7 Slides

ECOWAS Summit & Revised Supplementary Act

Formal adoption at the Lungi Summit. A directive on cyber trust & new DPO/CISO obligations.

Open Full Screen
🇨🇩 DRC Taxation 7 Slides

DRC: Digital Tax Order

Data centres (Tier I to IV), cloud, fintechs and Big Tech: the new official rates & DGRAD penalties.

Open Full Screen
🇲🇦 Morocco 2030 Focus 7 Slides

Morocco, Future Leader in Data Centres & AI

The Nexus AI Factory project ($1.2bn / 500 MW), 100% renewable power, the 2Africa cable and the Morocco Digital 2030 vision.

Open Full Screen
🇳🇬 UNESCO & AI 7 Slides

Nigeria: AI Readiness Assessment (UNESCO RAM)

A UNESCO, EU and Nigerian Government partnership feeding the national AI strategy and training ECOWAS judges.

Open Full Screen
🇸🇳 Senegal Briefing 7 Slides

Senegal: Protecting Critical Infrastructure

The cyber-resilience bill: designating essential operators, CSIRT reporting, system approval and penalties for executives.

Open Full Screen
🇦🇴 Angola Case Study 7 Slides

Cyberattack on Unitel Angola

Autopsy of a market sabotage: an attack 24 hours before the $327M BODIVA listing, the impact on card payments & banks, and the urgent need for a critical-operator framework.

Open Full Screen
🇧🇫 Burkina E-Government 7 Slides

Burkina Faso: 205 Public Platforms Audited

The ANSSI-BF campaign: 1,460 platforms mapped, penetration tests on government portals and a "Security by Design" doctrine.

Open Full Screen
Pan-African Media Offering

The ADT Editorial Line

Expert coverage built around three pillars that matter to African decision-makers.

1. GRC & DPA Compliance

Breaking down the news on governance, risk management and compliance across the continent's cybersecurity activity.

2. Cybersecurity & Resilience

Threat analysis, critical infrastructure protection and business recovery on the continent after a cyberattack.

3. AI & Tech Sovereignty

Algorithmic governance, sovereign LLMs, emerging legal frameworks and the fight against malicious uses of AI.

Get the ADT Executive Brief

Every week, receive a round-up of African laws, DPA enforcement actions and our latest visual carousels by email.

Notification