Privacy Regulations in Congo
2 privacy and data protection regulations that apply in Congo
Sub-Saharan Africa2
Malabo Convention
African Union member states
+12Continental framework treaty bundling data protection, cybercrime, cybersecurity, and e-commerce. Does not directly regulate websites but sets minimum standards for national laws. Took 9 years to reach the 15-ratification threshold. South Africa notably has not ratified.
Law 29-2019
Republic of the CongoRepublic of Congo's data protection law establishing a framework for personal data processing with fines up to XOF 100 million. The designated Data Protection Commission (CPDCP) has not yet been formally established, rendering enforcement non-existent. The law includes modern provisions such as DPO requirements and mandatory impact assessments for high-risk processing.