New data protection guidelines for Africa launched
The new set of guidelines highlight how privacy protection and the responsible use of personal data are critical factors in building greater trust online and in advancing the digital economy in Africa.
The Personal Data Protection Guidelines for Africa were jointly developed by the Internet Society - a global non-profit organisation that promotes the open development, evolution and use of the internet - and the African Union Commission to facilitate the implementation of the AU’s Convention on cybersecurity and data protection (known as the Malabo Convention), adopted in 2014.
Key recommendations
The guidelines recommend a range of actions for governments, policymakers, citizens and other stakeholders to take at the regional, national, organisational and individual level. Among the key recommendations for governments is that they should respect and protect individuals’ rights to privacy online and offline.
“Recent global events have shown us that the lack of appropriate protection for personal data can have a profound impact not just on individuals but also on society at large, to the point of endangering democratic systems,” said Dawit Bekele, African regional bureau director for the Internet Society. “These guidelines explain how people can take a more active role in the protection of their own data as well as the role that other stakeholders, including governments and legislators, have in ensuring the proper use of data.”
A foundation for trust in the digital environment
Two key principles of the guidelines urge all AU Member States to: recognise privacy as a foundation for trust in the digital environment and prioritize the sustainable and responsible use of personal data in the digital economy.
In addition, there are recommendations for citizens who are concerned about their data and privacy including:
- Using the internet and other sources to inform themselves about the risks and benefits of the digital economy or their online activities. This includes being aware of agreements they make when they sign up for "free" services or use social media platforms that may profit off their data.
- Understand and exercise their rights, and act, when needed. There is a corresponding role for governments to empower individuals to do so by ensuring citizens know how to exercise their rights under privacy and personal data protection laws.
- Develop their capabilities to protect their interests online. Supervisory authorities and governments should take steps to ensure that service-providers and product vendors are transparent about their business models and product capabilities, so consumers can make informed choices about the privacy implications of products and services.
“The Malabo Convention is the first step towards developing national legislative frameworks for cybersecurity and data protection in Africa. The guidelines launched today provide a path forward for the member states that have signed the convention, and hopefully encourage more countries to join,” says Moctar Yedaly, head of information society division, African Union Commission.
