Ethiopia: Implemented Personal Data Protection Proclamation (Proclamation No. 1321/2024), including data protection regulation

On 24 July 2024, the Personal Data Protection Proclamation enters into force. The Proclamation applies to public and private entities handling personal data within Ethiopia. The proclamation regulates personal data processing by automated and non-automated means. The Proclamation mandates that data processing must be lawful, fair, and for specific purposes, ensuring accuracy and security. Further, such processing must be proportionate, with data kept only as long as necessary. The processing of sensitive data is prohibited without the explicit consent of the data subject.