African Union: African Union Convention on Cyber Security and Personal Data Protection including provisions on data protection regulation entered into force

On 8 June 2024, the African Union Convention on Cyber Security and Personal Data Protection entered into force. The Convention outlines principles for the lawful, fair, and transparent processing of personal data, ensuring that data is collected and used responsibly. It mandates data controllers to implement appropriate security measures to protect personal data from unauthorised access, alteration, or destruction. The Convention also establishes the rights of data subjects, including the right to access, rectify, and object to the processing of their data, erasure, and protection against automated decision-making.