As of 2025, 39 out of 55 African nations have enacted data protection laws, with 34 establishing data protection authorities to oversee compliance and safeguard personal information. This is according to the 2025 Report on Data Protection in Africa by Yellow Card, a leading stablecoin infrastructure platform on the continent.
Growing Demand for Data Protection in Africa
The study highlights that countries with advanced digital ecosystems, such as Kenya, Nigeria, and South Africa, have an increasing demand for stronger data protection laws. In 2024, Kenya and Nigeria led the continent in data privacy enforcement, with their regulatory authorities making significant strides in ensuring compliance.
“2024 witnessed remarkable progress in data protection across Africa, marked by heightened awareness, increased training initiatives, new regulatory bodies, and proposed legislation,” the report stated.
These developments underscore Africa’s growing recognition of the importance of data privacy and the need to address the challenges posed by an evolving digital landscape.
Countries Strengthening Data Protection Laws
Botswana, Cameroon, Ethiopia, and Malawi have recently enacted new data protection laws, signaling a major leap toward enhanced data security standards. Similarly, Tanzania, Togo, the Democratic Republic of Congo (DRC), the Republic of Congo, and Somalia have established data protection authorities, reinforcing their commitment to regulatory oversight.
However, gaps persist as several nations, including Djibouti and Eritrea, are yet to introduce formal data protection regulations. The absence of legislation leaves citizens vulnerable to data breaches, misuse, and creates compliance challenges for international businesses.
The Need for a Unified Approach to Data Privacy
According to Yellow Card’s Group Data Protection and Privacy Counsel, Thelma Okorie, data protection awareness and implementation vary across Africa, influenced by factors such as legal frameworks, economic priorities, and available resources.
“Despite these variations, data protection laws are crucial in safeguarding privacy, mitigating cyber risks, and fostering cross-border trade,” Okorie emphasized.
Key Developments in Africa’s Data Protection Landscape
1. Expansion of Data Protection Laws and Sector-Specific Regulations
2025 is expected to see a surge in African nations enacting or refining data protection laws, strengthening the continent’s legal framework and aligning it with global best practices. Additionally, sector-specific regulations targeting finance, healthcare, biometric data, and children’s personal information are anticipated to tighten privacy safeguards and enhance compliance.
“As more nations introduce or update data laws, Africa will be better equipped to navigate data privacy challenges and facilitate secure digital transformation,” the report stated.
2. Rise in Enforcement Actions
Regulatory enforcement is expected to intensify across Africa in 2025. More countries with established data protection authorities will ramp up investigations, audits, and penalties for non-compliance.
“The growing enforcement landscape will cultivate a culture of accountability, increasing awareness among businesses and consumers about the significance of data privacy,” the survey noted.
3. Strengthened Collaboration Among Data Protection Authorities
Inter-agency cooperation is projected to be a game-changer in 2025, with African data protection regulators working together to harmonize regulations and tackle cross-border data challenges. The Network of African Data Protection Authorities (NADPA) will play a critical role in fostering collaboration, with its next conference scheduled for May 2025 in Nigeria.
“This event will serve as a key platform for regulators, policymakers, and industry leaders to discuss emerging trends and regulatory challenges in Africa’s data protection space,” the report highlighted.
4. Re-evaluating Cross-Border Data Transfer Mechanisms
Cross-border data transfers will remain a focal point in 2025, as African nations seek frameworks to ensure seamless data flow while maintaining privacy standards. Kenya and Nigeria have initiated discussions with the U.S. Department of Commerce regarding the Cross Border Privacy Rules (CBPR) framework—a potential game-changer for African nations looking to facilitate international data exchange.
“With existing data transfer provisions often deemed impractical for businesses, CBPR could provide a more viable alternative,” the report stated. However, careful evaluation is needed to balance international trade with stringent privacy protections.
5. Focus on Children’s Online Safety
Children’s online safety is set to take center stage in Africa’s digital policy agenda. With growing concerns over cyberbullying, exposure to harmful content, and online exploitation, regulators are prioritizing child protection in data privacy laws.
Senegal has already issued guidelines on safe online practices for children, while Botswana has amended its Data Protection Act to include specific provisions addressing minors’ rights.
Globally, nations like Australia have introduced stringent age restrictions on social media, hinting at a shift toward stricter online protections for children. Africa is expected to follow suit with stronger policies and enforcement mechanisms.
“The heightened focus on children’s online safety is likely to drive the adoption of specialized tools and policies by social media platforms and digital service providers to better safeguard young users,” the report noted.
The Future of Data Protection in Africa
Africa’s data protection landscape is evolving rapidly, driven by legislative advancements, regulatory enforcement, increased awareness, and collaborative initiatives. As digital transformation accelerates, ensuring robust data privacy frameworks will be essential for fostering trust, security, and compliance in the continent’s growing digital economy.
The coming years will be crucial in determining how Africa balances innovation with privacy, creating a safer and more accountable digital ecosystem for businesses and individuals alike.
