AFRICA DATA TALK

AFRICA DATA TALK

GRC OBSERVATORY

🌍 2026 Sanctions Review

TOP 5 DATA SANCTIONS IN AFRICA

Record fines, administrative proceedings, and formal notices: discover the regulators taking action.

AFRICA DATA TALK

#1 • 🇳🇬 NIGERIA (NDPC)

Historic sanctions against tech giants

Meta Platforms (2025) $32.8 Million

Historic settlement reached following severe data privacy violations.

Fidelity Bank (2024) ~ $350k

555.8M NGN fine for opening an account without a legal basis.

MultiChoice (2024) ~ $500k

766.2M NGN fine for illegal cross-border data transfers.

AFRICA DATA TALK

#2 • 🇿🇦 SOUTH AFRICA (IR)

Zero tolerance for public institutions

Dept of Justice (2023)
5M ZAR (~ $280,000)

Fine following a ransomware attack exacerbated by unrenewed antivirus and SIEM licenses.

Dept Basic Education (2024)
5M ZAR (~ $280,000)

Penalty imposed for the non-compliant publication of school results (matric results) in newspapers.

AFRICA DATA TALK

#3 • 🇰🇪 KENYA (ODPC)

Wave of targeted sanctions (Sept. 2023)

Total from this wave of audits: 9.3 Million KES (~ $70,000)

Roma School 4.5M KES (~$34k)

Publishing images of minors without formal parental consent.

Mulla Pride 2.97M KES (~$22k)

Harassment practices (doxxing) by a mobile lending app.

AFRICA DATA TALK

#4 • 🇸🇳 SENEGAL (CDP)

Public formal notices & Name and Shame

Annual Review (2025)
> 180M FCFA (~ $300,000)

Total fines accumulated over the year. The CDP issued 14 sanctions against various players (call centers, ad agencies, e-commerce).

Eiffage Rail Dakar (2025)
Formal Notice

Public sanction for deploying a company vehicle geolocation system without a prior declaration procedure.

AFRICA DATA TALK

#5 • 🇨🇮 CÔTE D'IVOIRE (ARTCI)

Strict warnings and injunctions

Yango CIV LLC (2023)
Decision No. 2023-0937

Formal notice for the illegal recording of passenger conversations inside its ride-hailing vehicles.

Standard Chartered (2023)
Decision No. 2023-0936

Sanctioned for failing to immediately notify authorities and its customers during a security breach.

AFRICA DATA TALK

Conclusion

"Don't just endure regulation, anticipate it. Consult our directory of 45 African laws and our strategic case law analyses."

www.africadatatalk.com