Somalia: Implemented Data Protection Act 2023 including business registration requirement

On 23 March 2023, the Data Protection Act 2023 was implemented following its publication in the Official Bulletin. The Act contains a business registration requirement for data controllers of major importance, which are those operating within Somalia and processing personal data of data subjects in Somalia. Such controllers must register within 6 months of attaining this status. In their registration with the data protection authority, they are required to state information such as the categories, number, and processing purpose of data processed by them, the categories of intended recipients, intended destination jurisdictions, and a description of risks, safeguards, and security measures.