ECOWAS • Data protection
West Africa is shifting up a gear on digital sovereignty. Meeting at the Lungi summit in Sierra Leone, ECOWAS member states formally adopted the revised Supplementary Act A/SA.1/01/10, which updates the 2010 rules to cover cloud, AI and the AfCFTA, together with Directive C/DIR.2/12/24 on cyber trust. On the agenda: harmonised requirements across data protection authorities, hardened security for operators of vital importance and an early-warning network linking national CERTs. For businesses and fintechs, the obligations are concrete: processing records, DPIAs, incident notification within 72 hours and standard clauses for intra-ECOWAS transfers. Discover in our carousel the essentials of these new instruments and what they change for DPOs and CISOs.