Sub-Saharan Africa2
Lei 22/11
AngolaAngola's data protection law establishing the APD as an increasingly active supervisory authority. The APD fined five companies in June-July 2024, signaling growing enforcement. Express consent is required before processing, and all activities must be notified to the APD. Penalties are unusually dollar-denominated, with criminal and civil liability in addition to administrative fines.
Malabo Convention
African Union member statesContinental framework treaty bundling data protection, cybercrime, cybersecurity, and e-commerce. Does not directly regulate websites but sets minimum standards for national laws. Took 9 years to reach the 15-ratification threshold. South Africa notably has not ratified.