Mauritania. Comprehensive data protection. Law
Law 2017-020Law No. 2017-020 of 22 July 2017 on the Protection of Personal Data
In force
Partly verified
Low confidence.Only APD website consulted; law date and transfer details from prior knowledge.
§1Summary
- Synopsis
Francophone-style data protection law requiring declarations/authorisations, data subject rights and limits on transfers, supervised by a dedicated authority that is now active.
- Key themes
- Unique features
Authority has recently become active, issuing opinions (deliberations) in 2026.
- SaaS relevance
SaaS processing Mauritanian personal data may need declarations and transfer authorisation.
§2Obligations
- Cross-border transfers
- Adequacy or authority authorisation (typical of model)
§3Dates
- Key dates
- Adopted
- In force
- Data protection authority operational; new president sworn in Oct 2026
§4Text and authority
- Text
- Authoritative text apd.mr
- Authority
- Autorité de Protection des Données à caractère Personnel (APD)
§5Where it applies
- Domestic law of
- Mauritania
§6Sources and verification
- Sources consulted
- Verification
Low confidence.
Partly verified
Low confidence.Only APD website consulted; law date and transfer details from prior knowledge.