East African Community (EAC). Treaty / framework. Framework (recommendations)

EAC Cyberlaws FrameworkEAC Legal Framework for Cyberlaws (Phase I)

In force

Partly verified

Low confidence. I could not verify the adoption date. The repository document is labelled 'Draft'.

§1Summary

Synopsis

A set of non-binding recommendations, developed with UNCTAD, for EAC partner states to harmonise cyberlaws. It includes recommendations on data protection and privacy based on international best practice. There is no binding EAC data protection instrument.

Key themes

cyberlaw harmonisation
data protection recommendations
e-transactions
cybercrime

Unique features

Soft-law harmonisation exercise; partner states such as Kenya, Uganda, Rwanda and Tanzania later passed their own data protection acts.

SaaS relevance

Background only.

§2Obligations

Breach notification: None
DPO: No
Cross-border transfers: None
Maximum penalty: None

§3Dates

Key dates

Adopted November 2008
In force 2010
Phase I draft in November 2008 (covering e-transactions, e-signatures, computer crime, data protection and privacy); adopted by the EAC Council of Ministers around 2010; Phase II (2011) covered IP, competition, taxation and information security

§4Text and authority

Text

Authoritative text repository.eac.int

Authority

None designated

§5Where it applies

Members of the body

Membership-based — check ratification status. Membership of East African Community (EAC) does not mean a state has signed or ratified this instrument.

§6Sources and verification

Sources consulted

Verification

Low confidence.

Partly verified

Low confidence. I could not verify the adoption date. The repository document is labelled 'Draft'.