African Union: Cross-border data transfer regulation in African Union Convention on Cyber Security and Personal Data Protection
Progress
Current status
in force
08 Jun 2023 in force
27 Jun 2014 adopted
Scope
Implementers
Algeria
Angola
Benin
Botswana
Burkina Faso
Burundi
Cameroon
Cape Verde
Central African Republic
Chad
Comoros
Congo
Djibouti
DR Congo
Egypt
Equatorial Guinea
Eritrea
Eswatini
Ethiopia
Gabon
Gambia
Ghana
Guinea
Guinea-Bissau
Ivory Coast
Kenya
Lesotho
Liberia
Libya
Madagascar
Malawi
Mali
Mauritania
Mauritius
Morocco
Mozambique
Namibia
Niger
Nigeria
Republic of the Sudan
Rwanda
Sao Tome & Principe
Senegal
Seychelles
Sierra Leone
Somalia
South Africa
South Sudan
Tanzania
Togo
Tunisia
Uganda
Western Sahara
Zambia
Zimbabwe
Policy Area
Data governance
Policy Instrument
Cross-border data transfer regulation
Regulated Economic Activity
cross-cutting
Government Branch
executive
Government Body
central government
Implementation Level
bi- or plurilateral agreement
Timeline of events
African Union Convention on Cyber Security and Personal Data Protection including provisions on cross-border data transfer regulation entered into force
On 8 June 2024, the African Union Convention on Cyber Security and Personal Data Protection entered into force. The Convention stipulates that personal data should not be transferred to non-Member States unless those states ensure an adequate level …
SourceEvent type
treaty
Action type
implementation
Government branch
executive
Government body
central government
African Union adopted Convention on Cyber Security and Personal Data Protection including provisions on cross-border data transfer regulation
On 27 June 2014, the African Union (AU) adopted the AU Convention on Cyber Security and Personal Data Protection. The Convention stipulates that personal data should not be transferred to non-Member States unless those states ensure an adequate leve…
SourceEvent type
treaty
Action type
adoption
Government branch
executive
Government body
central government