Sub-Saharan Africa3
The first binding sub-regional data protection framework in Africa, strongly influenced by the EU Data Protection Directive. Requires member states to enact national laws and establish supervisory authorities. About two-thirds have enacted implementing legislation. Currently being revised to align with modern standards.
Continental framework treaty bundling data protection, cybercrime, cybersecurity, and e-commerce. Does not directly regulate websites but sets minimum standards for national laws. Took 9 years to reach the 15-ratification threshold. South Africa notably has not ratified.
Benin's data protection rules are embedded within the broader Digital Code rather than enacted as standalone legislation. Book V of the Code du Numerique establishes the APDP as supervisory authority and requires prior declaration before processing personal data. The law was strengthened by a 2021 amendment and features escalating penalties reaching 5% of revenue for repeat offenders.