Lesotho. Comprehensive data protection. Act
Lesotho DPAData Protection Act, 2011 (Act No. 5 of 2012)
In force
Partly verified
Medium confidence. No verification notes recorded.§1Summary
- Synopsis
Lesotho's data protection law, based on the SADC model law, providing for a Data Protection Commission. Without the Commission, enforcement is largely limited to civil actions.
- Key themes
- Unique features
Separate transfer rules for SADC states that have transposed the SADC model law versus other countries.
- SaaS relevance
Formal obligations apply to SaaS processing Lesotho data, but practical enforcement risk is low.
§2Obligations
- Breach notification
- Commission and data subjects as soon as reasonably possible
- DPO
- No
- Cross-border transfers
- SADC-transposed states under conditions; others need adequacy
§3Dates
- Key dates
- Adopted
- In force
- Gazetted 2012-02-22; Data Protection Commission not yet established
§4Text and authority
- Text
- Authoritative text lesotholii.org
- Authority
- Not yet established (Data Protection Commission provided for)
§5Where it applies
- Domestic law of
- Lesotho
§6Sources and verification
- Verification
Medium confidence.
Partly verified
Medium confidence. No verification notes recorded.