Ethiopia: Adopted Personal Data Protection Proclamation (Proclamation No. 1321/2024) including data transfer regulation

On 4 April 2024, the Personal Data Protection Proclamation was adopted by the Parliament. The Proclamation prohibits the transfer of personal data to countries without adequate data protection unless certain conditions are met. These conditions include proof of sufficient protection in the recipient country, explicit consent from the data subject after being informed of potential risks, the necessity of the transfer, or the transfer being made from a public register as required by law. The authority may require proof of security measures and may prohibit, suspend, or condition transfers to protect data subjects' rights.