Privacy Regulations in Botswana

Botswana's Data Protection Act 2024 repealed and replaced the never-operational 2018 Act, entering into force 14 January 2025. It is consent-based, implying opt-in for non-essential website cookies.

Botswana's first data protection legislation focused solely on personal data protection. Establishes the Data Protection Commission with broad enforcement powers. Consent is required before processing, and data controllers must inform data subjects of their rights before collection. Notable for a 12-year maximum imprisonment penalty among the highest in Africa.