The African Union Convention on Cyber Security and Personal Data Protection (the Malabo Convention) enters into force today, following its fifteenth ratification. It was adopted in 2014.
Key points
- Sets a framework for electronic transactions, personal data protection and cyber security.
- Requires ratifying states to establish independent data protection authorities.
- Includes data protection principles and restrictions on transfers to non-member states.
- Covers cybercrime offences and national cyber security strategies.
- Applies to organisations through national laws in ratifying states.
More than 35 African countries now have data protection laws, many reflecting the Convention’s principles. UK organisations operating across Africa should expect increasing convergence, and more active regulators, across the continent.
Source: African Union Convention on Cyber Security and Personal Data Protection (African Union)
Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.
