African Union. Data access / sharing. Framework (policy)
AU Data Policy FrameworkAfrican Union Data Policy Framework
Partly verified
Medium confidence. No verification notes recorded.§1Summary
- Synopsis
A non-binding policy framework to help AU member states build national data systems. It promotes data protection, cross-border data flows within Africa, data infrastructure and a single African digital market. Member states are encouraged to adopt data protection laws and ratify the Malabo Convention.
- Key themes
- Unique features
It links data governance to the African Continental Free Trade Area, and favours free flow of data within Africa over localisation.
- SaaS relevance
Soft law; it signals the direction of national data regimes and AfCFTA digital trade rules affecting SaaS in Africa.
§2Obligations
- Breach notification
- None
- DPO
- No
- Cross-border transfers
- Promotes intra-African free flow with safeguards
- Maximum penalty
- None
§3Dates
- Key dates
- Adopted
- In force
- Endorsed by the AU Executive Council in February 2022; published July 2022
§4Text and authority
- Text
- Authoritative text au.int
- Authority
- AU Commission
§5Where it applies
- Members of the body
Membership-based — check ratification status. Membership of African Union does not mean a state has signed or ratified this instrument.
- Algeria
- Angola
- Benin
- Botswana
- Burkina Faso
- Burundi
- Cabo Verde
- Cameroon
- Central African Republic
- Chad
- Comoros
- Côte d'Ivoire
- Democratic Republic of the Congo
- Djibouti
- Egypt
- Equatorial Guinea
- Eswatini
- Ethiopia
- Gabon
- Ghana
- Guinea
- Kenya
- Lesotho
- Libya
- Madagascar
- Malawi
- Mali
- Mauritania
- Mauritius
- Morocco
- Niger
- Nigeria
- Republic of the Congo
- Rwanda
- São Tomé and Príncipe
- Senegal
- Seychelles
- Somalia
- South Africa
- Tanzania
- The Gambia
- Togo
- Tunisia
- Uganda
- Zambia
- Zimbabwe
§6Sources and verification
- Sources consulted
- Verification
Medium confidence.
Partly verified
Medium confidence. No verification notes recorded.