Your Cart
Loading

DETERMINATIONS DATABASE

The Determinations Page is your access point to Africa’s emerging body of data protection case law and regulatory enforcement. We are building country-specific databases that make it easy to explore how regulators interpret privacy rights, consent, and accountability, starting with Kenya, currently the most active jurisdiction in the region.


The Kenyan database features decisions from the Office of the Data Protection Commissioner (ODPC), analysed and summarised to help you understand what the outcomes mean for organisations and individuals. From marketing consent and employment data to breach reporting and CCTV use, these cases reveal how the law is evolving in practice.


More jurisdictions coming soon: Nigeria • South Africa • Ghana • Mauritius • Uganda • Angola • Eswatini • Tanzania


Join as a Country Reporter

Join a growing community of lawyers and data professionals contributing to Africa's most trusted knowledge base on data protection.

Apply Now



CASE SUMMARIES

ANGOLA

The Data Protection Law establishes the AgĂŞncia de Proteção de Dados (APD) as Angola’s data protection authority. APD’s Organic Statute was stablished by the Presidential Decree 214/2016 of October 10, and it’s board currently in office was nominated by the Presidential Decree 277/2019 September 6.

ESWATINI

The Eswatini Data Protection Authority (EDPA) is charged with the mandate to administer and foster compliance under the Data Protection Act, 2022.


The Act designates the Eswatini Communications Commission as the National Data Protection Authority (EDPA)

GHANA

The Data Protection Act, 2012 (Act 843) establishes the Data Protection Commission (DPC) as an independent body responsible for ensuring compliance with the Act's provisions regarding the collection, processing, and use of personal data. 



KENYA

The Office of the Data Protection Commissioner (ODPC) is established under the Data Protection Act, 2019 (the Act), which was enacted on November 8, 2019. The office is headed by the Data Protection Commissioner.




NIGERIA

The Nigeria Data Protection Bureau (NDPB) was established by the Federal Government in February 2022 and it is now the supervisory and regulatory authority for data protection in Nigeria.

The function was previously undertaken by the National Information Technology Development Agency (NITDA).


SOUTH AFRICA

The Information Regulator (the Regulator) is the data protection authority in South Africa. The 2013 Protection of Personal Information Act establishes it as an independent body charged with ensuring compliance with the Protection of Personal Information Act (POPIA) and the Promotion of Access to Information Act (PAIA) (out of scope) by public and private bodies. 

TANZANIA

The Personal Data Protection Commission ("PDPC") is the national data protection authority in Tanzania.









UGANDA

The Personal Data Protection Office is Uganda’s independent data protection office. It is established as an independent office under the National Information Technology Authority, Uganda (NITA-U) and is responsible for overseeing the implementation of and enforcement of the Data Protection and Privacy Act No. 9 of 2019.