Somalia: Implemented Data Protection Act 2023 including data protection regulation

On 23 March 2023, the Data Protection Act 2023 was implemented following its publication in the Official Bulletin. The Act establishes general principles and legal bases for the processing of personal data, such as valid consent of the data subject, contractual necessity, and legal necessity. Further, it establishes data subject rights, including the rights of confirmation, access, correction, deletion, and withdrawal of consent. Further, data processors of major importance, which are defined as controllers operating in Somalia and processes personal data of data subjects within Somalia, are subject to additional obligations, such as designating a data protection officer and conducting and submitting impact assessments prior to high-risk processing activities.