Ethiopia
LimitedComputer Crime Proclamation No. 958/2016 + Draft Data Protection Proclamation
Authority: Information Network Security Administration (INSA) | Enforcement: partial | Enacted: July 2016
Overview
Ethiopia does not have a comprehensive data protection law. Protections derive from the Computer Crime Proclamation (2016) and constitutional privacy provisions. A dedicated data protection bill has been drafted but not yet enacted.
14-Topic Coverage
Data Protection Authority
Partially AddressedINSA handles cybersecurity. No dedicated DP authority.
Consent Requirements
Partially AddressedConstitutional right to privacy. No comprehensive consent framework.
Data Subject Rights
Partially AddressedConstitutional privacy rights. No statutory data subject rights framework.
Cross-Border Transfer
Not AddressedNo specific cross-border transfer rules.
Breach Notification
Not AddressedNo mandatory breach notification requirement.
DPO Requirements
Not AddressedNo DPO requirement.
Children's Data
Partially AddressedChild rights provisions exist but not specific to data protection.
Penalties & Enforcement
Partially AddressedComputer Crime Proclamation penalties for data-related offences.
Sector-Specific Rules
Partially AddressedNBE financial data rules, telecom regulations.
Cookie/Tracking
Not AddressedNo specific cookie regulation.
AI & Automated Decisions
Not AddressedNo specific provisions.
Data Localisation
Partially AddressedFinancial and telecom sector data localisation requirements.
Significant Data Fiduciary
Not AddressedNo equivalent concept.
Government Data
Partially AddressedVarious proclamations protect government data.
Coverage Summary
Quick Navigation
Need Compliance Help?
Our data privacy team can help you navigate Ethiopia's regulations.
Book a Consultation