All Countries, Alerts

Navigating East Africa’s Data Protection Framework

The number of data protection laws in Africa has more than doubled in the last decade and a third of these laws were passed in just the last five years. Kenya, Uganda, and Tanzania have each adopted data protection legislative frameworks modelled on the European Union’s General Data Protection Regulation (GDPR) and have each set up regulatory authorities to drive compliance and enforcement.

Compliance with data protection laws in Kenya, Uganda, and Tanzania is essential for investors in East Africa. Legal teams should focus on understanding each country’s unique requirements, and ensuring proper registrations are made in each. Cross-border data transfers require careful consideration of compliance with each jurisdiction’s regulations. By adhering to the principles and requirements outlined in each country’s data protection framework, foreign investors can mitigate risks and foster a culture of responsible data handling in the region.

Legal teams should remain informed about updates to these laws and engage with the respective regulatory authorities to ensure ongoing compliance and business success in East Africa.

In this article we summarise the key aspects of the data protection laws in these three countries, focusing on compliance requirements, regulatory authorities, and cross-border data transfer guidelines.

Click here to read the full article.

For further information, please contact us at info@adili.africa

Recent insights