Sub-Saharan Africa3
The first binding sub-regional data protection framework in Africa, strongly influenced by the EU Data Protection Directive. Requires member states to enact national laws and establish supervisory authorities. About two-thirds have enacted implementing legislation. Currently being revised to align with modern standards.
Continental framework treaty bundling data protection, cybercrime, cybersecurity, and e-commerce. Does not directly regulate websites but sets minimum standards for national laws. Took 9 years to reach the 15-ratification threshold. South Africa notably has not ratified.
Niger's data protection framework was enacted in 2017 and amended in 2019, with the HAPDP supervisory authority launching operations in August 2020. The law sets some of the highest minimum fines in West Africa at XOF 20 million and combines administrative sanctions with criminal penalties including imprisonment for serious violations.