Somalia. Comprehensive data protection. Act
Somalia DPAData Protection Act, 2023 (Law No. 005 of 2023)
In force
Partly verified
Medium confidence.Penalty amounts not found.
§1Summary
- Synopsis
Somalia's first data protection law, closely following the GDPR model, with an independent Data Protection Authority established in 2024. It is supported by implementing regulations and guidance.
- Key themes
- Unique features
Controllers 'of major importance' (and others designated by the Authority) must register within six months and renew annually; derogation-based transfers must be reported to the DPA.
- SaaS relevance
Large SaaS platforms processing Somali data may be designated as of major importance and required to register.
§2Obligations
- Breach notification
- DPA within 72h
- DPO
- Conditional
- Cross-border transfers
- Adequacy, BCRs, contractual clauses, codes, certification; limited derogations notified to DPA
§3Dates
- Key dates
- Adopted
- In force
- DPA launched February 2024; Implementation Regulation 2024; Council of Ministers approved further regulations January 2026
§4Text and authority
- Text
- Authoritative text dpa.gov.so
- Authority
- Somalia Data Protection Authority (DPA)
§5Where it applies
- Domestic law of
- Somalia
§6Sources and verification
- Sources consulted
- Verification
Medium confidence.
Partly verified
Medium confidence.Penalty amounts not found.