Ethiopia
Summary
Law: Personal Data Protection Proclamation No. 1321/2024 (the Act)
Regulator: The Ethiopian Communications Authority
Summary: On July 24, 2024, the Personal Data Protection Proclamation No. 1321/2024 (the Act) was officially published in the Federal Negarit Gazette. The Act provides for data subject rights, and principles of data processing, and establishes an independent supervisory authority, the Ethiopian Communications Authority. Furthermore, the Act places restrictions on data transfers to a third-party jurisdiction, as well as requirements to appoint a data protection officer, report data breaches, and perform a data protection impact assessment (DPIA).
Furthermore, several existing laws and regulations address aspects of data privacy. These include the Constitution of the Federal Democratic Republic of Ethiopia 1995 which establishes a right to privacy, laws regulating the financial sector, and sanctions for violations of certain privacy-related provisions. These laws and regulations have mandated powers to various authorities for the protection of privacy such as the Communication Services Proclamation No. 1072/2018.