Angola. Comprehensive data protection. Law
Law 22/11Lei da Proteção de Dados Pessoais – Law No. 22/11 of 17 June 2011
In force
Partly verified
Medium confidence.DLA Piper page last reviewed 2021; enforcement limited. APD URL not fetched.
§1Summary
- Synopsis
Angola's data protection law, modelled on the Portuguese pre-GDPR regime. It requires consent and prior notification of processing to the APD, with prior authorisation for some sensitive processing and transfers.
- Key themes
- Unique features
Processing must generally be notified to the APD in advance, and transfers to non-adequate countries need prior APD authorisation (notice even for adequate ones).
- SaaS relevance
SaaS providers processing Angolan personal data, especially offshore, face notification and transfer authorisation formalities with the APD.
§2Obligations
- Extraterritorial
- Limited
- Breach notification
- None under DP law (sectoral for e-communications)
- DPO
- No
- Cross-border transfers
- Prior notice (adequate) / APD authorisation (non-adequate)
§3Dates
- Key dates
- Adopted
- In force
- APD statute Presidential Decree 214/2016; APD board appointed 2019 (Decree 277/2019)
§4Text and authority
- Text
- Authoritative text apd.ao
- Authority
- Agência de Proteção de Dados (APD)
§5Where it applies
- Domestic law of
- Angola
§6Sources and verification
- Verification
Medium confidence.
Partly verified
Medium confidence.DLA Piper page last reviewed 2021; enforcement limited. APD URL not fetched.