Somalia: Implemented Data Protection Act 2023 including cybersecurity regulation

On 23 March 2023, the Data Protection Act 2023 was implemented following its publication in the Official Bulletin. The Act sets out cybersecurity requirements for data controllers, requiring them to take appropriate technical and organisational measures to ensure the security, integrity, and confidentiality of personal data in its possession. In case of a data breach, controllers are required to notify the data protection authority within 72 hours. Finally, each controller must keep a record of data breaches.