Africa’s digital expansion has spurred significant progress in data privacy protection, with 39 out of 55 countries enacting data protection laws as of 2025, according to a report by Yellow Card.
Among these, 34 nations have established dedicated data protection authorities to enforce compliance, the stablecoin-based infrastructure platform noted.
Kenya, Nigeria, and South Africa, countries with more developed digital ecosystems, have emerged as leaders in data privacy enforcement.
In 2024, Kenya and Nigeria’s data protection authorities made notable strides in ensuring compliance with existing regulations. Meanwhile, Botswana, Cameroon, Ethiopia, and Malawi recently enacted new data protection laws, marking a significant step forward in improving privacy standards.
Tanzania, Togo, the Democratic Republic of Congo, the Republic of Congo, and Somalia have also established data protection authorities to oversee compliance and safeguard citizens’ personal information.
Despite these advancements, gaps remain. Countries such as Djibouti and Eritrea have yet to introduce formal data protection legislation, leaving citizens vulnerable to data breaches and misuse. This regulatory disparity also poses challenges for international businesses operating across diverse legal frameworks.
Thelma Okorie, Yellow Card’s Group Data Protection and Privacy Counsel, emphasized the importance of data protection laws in mitigating risks such as cybercrime and promoting cross-border trade.
“Despite the variables in different countries, data protection laws remain paramount in safeguarding individuals’ privacy,” she stated.
Looking ahead, Africa’s data protection landscape is expected to evolve further in 2025.
Key trends include the expansion of data protection laws, sector-specific regulations, increased enforcement actions, strengthened collaboration among data protection authorities, and a focus on children’s online safety.
