Privacy Map

Economic Community of West African States (ECOWAS). Comprehensive data protection. Supplementary Act (regional community law)

ECOWAS Supplementary ActSupplementary Act A/SA.1/01/10 on Personal Data Protection within ECOWAS

In force
Partly verifiedMedium confidence. The Statewatch copy is unofficial. The revision status is unclear; a 2024 consultation existed and I found no adopted revision.

§1Summary

Synopsis

Requires ECOWAS member states to adopt data protection laws based on common principles: consent and legitimacy, purpose, proportionality, accuracy, transparency, confidentiality and security. It also requires independent national DPAs, data subject rights and restrictions on transfers outside ECOWAS.

Key themes
  • principles
  • independent DPA
  • prior formalities
  • data subject rights
  • transfers outside ECOWAS
Unique features

It is binding community law that annexes to the ECOWAS Treaty. Its French-style prior declaration and authorisation formalities show up in many West African national laws.

SaaS relevance

It shapes national registration and transfer requirements that SaaS providers meet in West African markets.

§2Obligations

Cross-border transfers
Transfers outside ECOWAS only to adequate countries
Maximum penalty
Set by national law

§3Dates

Key dates
  • Adopted
  • In force
  • Adopted in Abuja on 2010-02-16; a revision was under consultation in late 2024

§4Text and authority

Text
Authority
National data protection authorities of ECOWAS member states

§5Where it applies

Members of the body

Membership-based — check ratification status. Membership of Economic Community of West African States (ECOWAS) does not mean a state has signed or ratified this instrument.

§6Sources and verification

Sources consulted
Verification

Medium confidence.

Partly verifiedMedium confidence. The Statewatch copy is unofficial. The revision status is unclear; a 2024 consultation existed and I found no adopted revision.