Burundi. Comprehensive data protection. Law

Law 1/03Law No. 1/03 of 10 March 2026 on the protection of personal data

In force

Partly verified

Medium confidence. Official PDF is image-only; substantive provisions not verified.

§1Summary

Synopsis

Burundi's first data protection law, in eight chapters covering rights, controller obligations and governance. It creates an independent oversight authority and sanctions that operate alongside the Penal Code.

Key themes

consent
data subject rights
controller obligations
supervisory authority
sanctions

Unique features

Very new law; authority yet to be constituted.

SaaS relevance

SaaS providers with Burundian customers should monitor implementing texts.

§2Dates

Key dates

Adopted 10 March 2026
In force 10 March 2026
Adopted by National Assembly 2026-01-15 and Senate January 2026; promulgated 2026-03-10

§3Text and authority

Text

Authoritative text assemblee.bi

Authority

Not yet established (independent administrative authority provided for)

§4Where it applies

Domestic law of: Burundi

§5Sources and verification

Verification

Medium confidence.

Partly verified

Medium confidence. Official PDF is image-only; substantive provisions not verified.