Somalia: Passed Data Protection Act 2023 including business registration requirement

On 9 March 2023, the Lower House of Somalia passed the Data Protection Act 2023. The Act contains a business registration requirement for data controllers of major importance, which are those operating within Somalia and processing personal data of data subjects in Somalia. Such controllers must register within 6 months of attaining this status. In their registration with the data protection authority, they are required to state information such as the categories, number, and processing purpose of data processed by them, the categories of intended recipients, intended destination jurisdictions, and a description of risks, safeguards, and security measures.