Legal Intelligence · Privacy & Data Protection

Privacy & Data Protection legal & regulatory updates

Briefly tracks privacy & data protection developments — court rulings, legislation, gazette notices, and regulatory updates — from courts and regulators. 55 updates tracked in the past 30 days, last updated 16 Sept.

Get Privacy & Data Protection updates in your inbox
Legal News
Togo
Legal News

Togo IPDCP: Mandates Public Agency Data Obligations Compliance

Togo’s Personal Data Protection Authority (IPDCP) convened representatives from ministries and state institutions in Lomé, Togo, on Tuesday, September 15, 2026, to reinforce compliance with the country's personal data laws. This meeting served as a crucial reminder to public agencies regarding their obligations concerning the collection and processing of personal data, underscoring the IPDCP's commitment to enhancing data protection across the public sector. The authority emphasized that protecting personal data is not merely a regulatory requirement but also a matter of digital sovereignty and public trust, as articulated by Bialabna Abaloutou, head of compliance at the IPDCP. The IPDCP's proactive engagement with public agencies signals a significant shift towards robust enforcement of Togo's data protection framework. This initiative is rooted in Law No. 2019-014, adopted in October 2019, which provides the comprehensive legal and institutional framework for personal data governance in the country, specifically designed to safeguard privacy and individual rights amidst the expansion of digital services. The authority's focus on public sector compliance, including the mandate for ministries and institutions to appoint data protection contacts and the planned training and certification of these officials, indicates a structured approach to embedding data protection principles at an operational level. This move is likely to set a precedent for compliance expectations across all sectors. Key parties involved in this development include the IPDCP itself, led by President Colonel Bédiani Belei, various Togolese ministries and state institutions, and their senior officials. For legal practitioners and businesses operating in Togo, this development necessitates immediate attention. Attorneys advising public sector clients must ensure their organizations are not only aware of but actively implementing the provisions of Law No. 2019-014, particularly concerning data handling practices and the designation of qualified data protection contacts. Private sector entities should view this public sector push as a strong indicator of future regulatory scrutiny and should proactively review their own data processing activities to align with the spirit and letter of the law. Monitoring the IPDCP's upcoming training and certification programs will be vital for understanding the evolving standards and best practices for data protection compliance in Togo. The outcome of specific enforcement actions or penalties resulting from this compliance push is not yet reported in the excerpt.

16 Sept
Nigeria
Legal News

FG Nigeria: Sets December 2026 Nigeria NIN 95% Coverage Deadline

The Nigerian Federal Government has set a deadline of December 2026 to achieve 95% coverage of the country's population under the National Identification Number (NIN) system. This ambitious deadline signifies a renewed and intensified commitment by the government to universal identity management across Nigeria. The National Identification Number (NIN) has become an increasingly mandatory requirement for a wide array of essential services, including banking, telecommunications (SIM card registration), voter registration, passport applications, and access to various government services. Achieving near-universal coverage will have significant implications for digital inclusion, financial services, national security, and the overall ease of doing business. While streamlining identification processes, it also raises critical considerations regarding data privacy, accessibility for remote and vulnerable populations, and potential challenges for individuals who may struggle to meet the enrollment requirements within the stipulated timeframe. The legal framework underpinning this initiative is primarily the National Identity Management Commission (NIMC) Act 2007, which established the NIMC and the National Identity Database, designating the NIN as the primary identifier for Nigerian citizens and legal residents. Subsequent regulations and directives from various government agencies have progressively mandated the use of NIN for specific transactions and services. This new deadline reinforces the government's intent to fully implement the provisions of the NIMC Act and related policies. Furthermore, the initiative operates within the broader context of data protection laws, notably the Nigeria Data Protection Act (NDPA) 2023, which governs the collection, storage, processing, and security of personal data, including the biometric information associated with NINs. The key parties involved include the Federal Government, the National Identity Management Commission (NIMC) as the implementing agency, various Ministries, Departments, and Agencies (MDAs) that rely on NIN for service delivery, and the entire Nigerian populace. Attorneys should advise clients, particularly those in sectors such as telecommunications, financial services, and any industry requiring robust customer identification, to prepare for the implications of near-universal NIN coverage. This includes reviewing and updating compliance frameworks for NIN integration mandates, ensuring data privacy policies align with the Nigeria Data Protection Act (NDPA) 2023 regarding the handling of NIN data, and implementing stringent data security measures. Businesses should anticipate increased enforcement of NIN-related regulations and potential penalties for non-compliance. Legal professionals may also observe an increase in cases related to identity verification challenges, data breaches, or disputes arising from individuals facing difficulties in obtaining their NIN or accessing essential services due to enrollment issues. Closely monitoring NIMC's implementation strategies, public awareness campaigns, and any new directives will be crucial for proactive legal guidance.

16 Sept
DR Congo
Legal News

DRC: RDC-PASS Digital Identity Deployment Advances With Training

In the Democratic Republic of Congo, the Minister of Digital Economy, Augustin Kibassa Maliba, launched the training of the first cohort of 50 RDC-PASS registration agents in Kinshasa on Tuesday, September 15, to support the deployment of a new digital identity and authentication system. This initiative marks a pivotal step in the nation's digital transformation agenda, aiming to provide citizens with secure and streamlined access to public digital services through a unified digital identity. This development holds profound legal significance for practitioners across various sectors. The introduction of a national digital identity system like RDC-PASS necessitates the establishment of robust legal frameworks governing data privacy, cybersecurity, and the legal validity of electronic transactions and digital signatures. Attorneys will need to advise clients on compliance with new or amended legislation related to personal data protection, digital authentication standards, and the legal implications of conducting business and accessing services in a digitally identified environment. For financial institutions, this system could revolutionize Know Your Customer (KYC) processes, while for technology companies, it presents both opportunities and regulatory challenges in integrating with the national digital identity infrastructure. The legal context for the RDC-PASS system is primarily shaped by the DRC's evolving digital economy legislation. Key among these is Law No. 20/017 of 25 November 2020 on electronic transactions, which provides a foundational legal basis for digital interactions. However, the full deployment of RDC-PASS will likely require further specific regulations or decrees addressing data governance, interoperability, and the rights and obligations of citizens and service providers concerning their digital identities. This system will also interact with existing laws on civil registration and national identification, potentially leading to their modernization. The Ministry of Digital Economy, under Minister Kibassa Maliba, is the central governmental entity driving this regulatory and technological shift. The key parties involved in this initiative are Minister Augustin Kibassa Maliba and the Ministry of Digital Economy, the RDC-PASS system itself, the initial cohort of 50 trained registration agents, and ultimately, the entire citizenry of the DRC who will be the end-users and beneficiaries of this digital identity. The successful implementation of RDC-PASS will depend on collaboration between various government agencies, technology providers, and public engagement. The excerpt does not report on the specific outcomes or challenges of the training or the full deployment, but rather the launch of the training phase. Practitioners should proactively monitor legislative and regulatory updates pertaining to digital identity, data protection, and electronic services in the DRC. They should advise businesses on adapting their operational procedures and technological infrastructure to integrate with the RDC-PASS system, ensuring compliance with emerging data privacy laws and secure digital authentication protocols. Furthermore, legal professionals should prepare to address potential legal disputes arising from issues such as identity theft, data breaches, or challenges to the legal validity of transactions conducted using digital identities, as the digital landscape continues to mature in the Democratic Republic of Congo.

16 Sept

Privacy & Data Protection coverage by jurisdiction

Other topics