Uploaded June 2026 | Updated September 2026, 3 weeks ago
Enforcement of Data Protection Laws in Africa: Implications for Privacy Engineers
Mubarak Raji, University of Illinois Urbana–Champaign
As Africa experiences a surge in digital advancement, with internet users projected to reach about 1.1 billion in 2029, it has also seen an increase in data protection laws (DPLs), with about 44 of 55 African Union countries have DPLs as of December 2025. Enforcement of these laws has also begun (e.g., Nigeria fined Meta USD220 million). However, African enforcement mechanisms are rarely considered by privacy engineers. In this presentation, I will share our study results from a thematic content analysis that examined the enforcement mechanisms of 20 African DPLs reveal unique enforcement patterns, such as extraterritorial reach, mandatory compliance audits, administrative and criminal sanctions, and financial and civil liabilities. Our findings are essential for all privacy professionals, particularly privacy engineers whose technical work operationalizes privacy, as they traverse the intricacies of compliance in Africa's evolving landscape. Understanding African enforcement approaches provides the PEPR audience with a vital perspective on global data protection efforts and strengthens their capability to address compliance challenges across diverse regulatory environments.
View the full PEPR '26 program at usenix.org/conference/pepr26/program
Enforcement of Data Protection Laws in Africa: Implications for Privacy Engineers
Mubarak Raji, University of Illinois Urbana–Champaign
As Africa experiences a surge in digital advancement, with internet users projected to reach about 1.1 billion in 2029, it has also seen an increase in data protection laws (DPLs), with about 44 of 55 African Union countries have DPLs as of December 2025. Enforcement of these laws has also begun (e.g., Nigeria fined Meta USD220 million). However, African enforcement mechanisms are rarely considered by privacy engineers. In this presentation, I will share our study results from a thematic content analysis that examined the enforcement mechanisms of 20 African DPLs reveal unique enforcement patterns, such as extraterritorial reach, mandatory compliance audits, administrative and criminal sanctions, and financial and civil liabilities. Our findings are essential for all privacy professionals, particularly privacy engineers whose technical work operationalizes privacy, as they traverse the intricacies of compliance in Africa's evolving landscape. Understanding African enforcement approaches provides the PEPR audience with a vital perspective on global data protection efforts and strengthens their capability to address compliance challenges across diverse regulatory environments.
View the full PEPR '26 program at usenix.org/conference/pepr26/program
