African Union: African Union adopted Convention on Cyber Security and Personal Data Protection including provisions on cross-border data transfer regulation

On 27 June 2014, the African Union (AU) adopted the AU Convention on Cyber Security and Personal Data Protection. The Convention stipulates that personal data should not be transferred to non-Member States unless those states ensure an adequate level of protection for privacy and fundamental rights. In cases where adequate protection is not guaranteed, data controllers must seek authorisation from the national protection authority before transferring the data.