As Africa’s digital ecosystem expands, countries across the continent are increasing efforts to protect data privacy through legal frameworks and enforcement mechanisms. A new report by Yellow Card, Africa’s leading stablecoin-based infrastructure platform, shows that as of 2025, 39 out of 55 African nations have enacted data protection laws, with 34 out of these having additionally established data protection authorities.
Countries with more developed digital ecosystems, such as Kenya, Nigeria, and South Africa, have a high demand for stronger data protection laws. In 2024, Kenya and Nigeria led in data privacy enforcement, with their respective data protection authorities making notable efforts towards ensuring compliance.
Botswana, Cameroon, Ethiopia and Malawi, have recently enacted new data protection laws, marking a significant stride towards improving data protection standards in these nations. Tanzania, Togo, the Democratic Republic of Congo (DRC), the Republic of Congo and Somalia, have established data protection authorities to oversee compliance and safeguard citizens’ personal information. However, gaps remain, as several African countries, such as Djibouti and Eritrea, have yet to introduce formal data protection regulations. This lack of legislation leaves citizens vulnerable to data breaches and misuse and poses challenges for international businesses navigating different regulatory landscapes.
According to Thelma Okorie, Yellow Card’s Group Data Protection and Privacy Counsel, awareness and the ability to protect data varies widely across African nations, depending on factors such as each country’s legal system, economic focus, and available resources. “Despite the variables in different countries, data protection laws remain paramount in safeguarding individuals’ privacy, mitigating risks such as cybercrime and in promoting cross-boarder trade.”
Looking ahead to 2025, Africa’s data protection landscape is expected to evolve further. Key trends expected include expansion of data protection laws and sector-specific regulations, increase in enforcement actions, strengthened collaboration among data protection authorities, re-evaluation of cross-border data transfer mechanisms, and focus on children’s online safety.
These developments will shape Africa’s regulatory and enforcement environment, ensuring the continent is better positioned to safeguard digital privacy in an increasingly interconnected world.
Also Read: Yellow Card Acquires Crypto Asset Service Provider (CASP) Licence in South Africa
