Sub-Saharan Africa3
Continental framework treaty bundling data protection, cybercrime, cybersecurity, and e-commerce. Does not directly regulate websites but sets minimum standards for national laws. Took 9 years to reach the 15-ratification threshold. South Africa notably has not ratified.
The first binding sub-regional data protection framework in Africa, strongly influenced by the EU Data Protection Directive. Requires member states to enact national laws and establish supervisory authorities. About two-thirds have enacted implementing legislation. Currently being revised to align with modern standards.
Benin's data protection rules are embedded within the broader Digital Code rather than enacted as standalone legislation. Book V of the Code du Numerique establishes the APDP as supervisory authority and requires prior declaration before processing personal data. The law was strengthened by a 2021 amendment and features escalating penalties reaching 5% of revenue for repeat offenders.