Ethiopia: Adopted Personal Data Protection Proclamation (Proclamation No. 1321/2024) including age verification requirement

On 4 April 2024, the Personal Data Protection Proclamation was adopted by the Parliament. The proclamation defines a minor as a data subject under 16 years old. It mandates that processing a minor’s personal data must prioritise their rights and best interests, with the data controller responsible for proving compliance. The processing of minors' data is lawful only with consent from a parent, guardian, or tutor or when necessary for the minor’s vital interests. The data controller must verify the minor’s age and the validity of consent, considering available technology for age verification. The proclamation mandates that data processing of minors for marketing, profiling, or profile merging is prohibited.