On 16 October 2025, the National Communications Authority opened a consultation on the Electronic Communications Act, 2025, which includes provisions for data protection regulation until 14 November 2025. The National Communications Authority, in consultation with the Data Protection Commission, would be empowered to issue sector-specific data protection guidelines. Service providers could only retain metadata as required by law for national security or billing purposes, with a maximum retention period defined by the Authority. Telecommunication service providers would need to implement subscriber verification systems interoperable with national identity databases, while biometric data collection would require a prior data protection impact assessment in accordance with the Data Protection Act.
Original source