Support Centre

Ethiopia

Summary

Law: Personal Data Protection Proclamation No. 1321/2024 (the Act)

Regulator: The Ethiopian Communications Authority

Summary: On July 24, 2024, the Personal Data Protection Proclamation No. 1321/2024 (the Act) was officially published in the Federal Negarit Gazette. The Act provides for data subject rights, and principles of data processing, and establishes an independent supervisory authority, the Ethiopian Communications Authority. Furthermore, the Act places restrictions on data transfers to a third-party jurisdiction, as well as requirements to appoint a data protection officer, report data breaches, and perform a data protection impact assessment (DPIA).

Furthermore, several existing laws and regulations address aspects of data privacy. These include the Constitution of the Federal Democratic Republic of Ethiopia 1995 which establishes a right to privacy, laws regulating the financial sector, and sanctions for violations of certain privacy-related provisions. These laws and regulations have mandated powers to various authorities for the protection of privacy such as the Communication Services Proclamation No. 1072/2018.

Insights

The digital landscape continuously evolves, demanding strong and robust frameworks to safeguard personal data. Many countries have put in place laws to protect the privacy and security of individuals and organizations. On April 4, 2024, Ethiopia, which hitherto did not have any comprehensive data protection rules except for those scattered in financial and media laws, took a significant step forward by enacting the Personal Data Protection Proclamation (Proclamation No. 1321/2024) (the Proclamation).

One of the prominent legislations in the realm of private data protection is the European Union's General Data Protection Regulation (GDPR) which significantly strengthens privacy rights for individuals in the European Economic Area. Due to its comprehensive nature and its extensive geographical application, the GDPR could serve as a valuable reference standard. In this Insight article, Fitsum Sitotaw, from DABLO Law Firm LLP, gives a general overview of the Ethiopian Proclamation in light of the GDPR.