Data protection across 54 countries — shaped nationally by each state's own law, and continentally by the African Union's Malabo Convention and regional frameworks from ECOWAS, SADC and the EAC.
Each square is a country, placed by rough geography and coloured by legislative status. Click a country to open its page.
Laws and models that apply above the national level.
The AU Convention on Cyber Security and Personal Data Protection — entered into force June 2023 after Mauritania's 15th ratification. The continental baseline for member states.
Read summary →West Africa's binding regional framework — the reason most ECOWAS states legislated early. Directly applicable within member-state legal orders.
Read summary →A non-binding template Southern African states adapt into national legislation — visible in the laws of Zambia, Zimbabwe and Eswatini.
Read summary →Early guidance for East African Community members on privacy and e-transactions legislation.
Read summary →Browse or search — the same data that powers the map.