Law: There is no general personal data protection law.

Regulator: There is no data protection authority.

Summary: While there is no general data protection law in Afghanistan, the Constitution of Afghanistan provides for the right to confidentiality and privacy of communications. Additionally, sectoral laws such as the Telecommunications Services Law (available in Pashto and Dari here) and the Banking Law of Afghanistan contain some limited clauses on data protection, and the Penal Code was amended in 2017 to include penalties for cybercrime.