The Gambia Assented to a Modern Privacy Law. The Next Step Is Operational.
The Gambia has assented to a modern privacy framework covering extraterritorial processing, data rights, security, breaches and transfers.
Africa Series
BlackTree articles covering cybersecurity, privacy and digital legislation across Africa.
Kenya Expanded Its Cybercrime Law. The Courts Have Already Drawn a Boundary.
Kenya expanded its cybercrime law in 2025, then saw the High Court invalidate administrative website blocking and a vague speech offence in 2026.
Cameroon’s New Privacy Law Is Past Its Grace Period
Cameroon's 2024 data protection law is now past its 18-month compliance period, turning privacy governance, breach handling and transfer controls into current obligations.
Burundi Has a Personal Data Protection Law. The Compliance Map Just Expanded.
Burundi's Law No. 1/03 creates a dedicated personal-data regime, regulator and enforcement framework for public and private processing.
Somalia’s Data Protection Act Now Has Operating Regulations
Somalia's 2026 regulations turn the 2023 Data Protection Act into a more operational regime for registration, supervision and breach response.
Egypt’s Data Protection Law Finally Has Operating Rules. The Clock Ends in November 2026.
Egypt's long-awaited executive regulations have turned its 2020 privacy statute into an operational licensing, transfer and breach-response regime.
Zambia Split Cybersecurity Regulation From Cybercrime. The Obligations Got Sharper.
Zambia's two 2025 cyber laws separate regulatory security duties from criminal offences while sharpening incident, audit, hosting and licensing obligations.
Botswana Rewrote Its Privacy Law Before the First Version Settled In
Botswana replaced its earlier privacy regime with a more operational 2024 Act covering overseas services, breach reporting, high-risk processing and regulator powers.
Ethiopia’s Privacy Law Is Also a Data-Sovereignty Law
Ethiopia's Personal Data Protection Proclamation combines familiar privacy duties with local-storage rules, transfer controls and a 72-hour breach clock.
Africa’s Digital Compact Is Not a Law. It Still Sets the Direction of Regulation.
The African Digital Compact and Continental AI Strategy are not binding laws, but they set a common direction for digital and AI governance.