Kenya is emerging as a frontrunner in data privacy enforcement, with its data protection authority intensifying efforts to ensure compliance with existing laws.
The country, alongside Nigeria, led the continent in 2024 by actively enforcing regulations designed to safeguard citizens’ personal information.
This heightened focus reflects the increasing demand for robust data privacy protections in nations with advanced digital ecosystems.
A new report by Yellow Card, Africa’s leading stablecoin-based infrastructure platform, reveals that 39 out of 55 African nations have now enacted data protection laws.
Among them, 34 have gone a step further by establishing dedicated data protection authorities to oversee compliance and enforcement.
Read More
Beyond Kenya, other African nations are making significant progress.
Botswana, Cameroon, Ethiopia, and Malawi have recently enacted new data protection laws, reinforcing their legal frameworks to enhance digital security.
Meanwhile, Tanzania, Togo, the Democratic Republic of Congo (DRC), the Republic of Congo, and Somalia have set up data protection authorities to regulate the handling of personal data.
Despite these strides, gaps remain. Countries like Djibouti and Eritrea have yet to implement formal data protection regulations, leaving their citizens vulnerable to data breaches and misuse.
The absence of comprehensive laws in some nations also presents challenges for international businesses operating across different regulatory landscapes.
Yellow Card’s Group Data Protection and Privacy Counsel Thelma Okorie note that variations in legal structures, economic focus, and resources contribute to differing levels of awareness and enforcement across the continent.
“Despite the variables in different countries, data protection laws remain paramount in safeguarding individuals' privacy, mitigating risks such as cybercrime and in promoting cross-border trade,” she noted.
As 2025 approaches, data protection is set to become an even greater priority for African governments.
Countries are expected to introduce more sector-specific regulations, ramp up enforcement efforts, and strengthen cooperation among data protection authorities.
Additionally, policies governing cross-border data transfers are likely to be re-examined, while new measures focusing on protecting minors in digital spaces may take centre stage.
These ongoing developments signal a shift towards a more regulated digital environment, aiming to balance innovation with the need for stronger privacy safeguards.
