Cyber Law at Ethiopia
Ethiopia has established a comprehensive legal framework to address cybercrime and data protection, notably through the Computer Crime Proclamation No. 958/2016 and the Personal Data Protection Proclamation No. 1321/2024.
🛡️ Computer Crime Proclamation No. 958/2016
Enacted in 2016, this proclamation criminalizes various cyber offenses, including
Unauthorized Access: Accessing computer systems or data without permission
Data Interception: Unauthorized interception of data during transmission
Malware Distribution: Creating or distributing malicious software
Computer-Related Fraud and Forgery: Using computers to commit traditional crimes like fraud and forgery Penalties for violations can include fines and imprisonment, depending on the severity of the offense The proclamation also grants law enforcement agencies extensive powers to investigate cybercrimes, including the authority to conduct searches and seizures of computer systems and data, often without prior notification.
🔐 Personal Data Protection Proclamation No. 1321/2024
Adopted on April 4, 2024, and entering into force on July 24, 2024, this proclamation governs the collection, processing, and storage of personal data in Ethiopia. Key provisions include:
Data Processing Principles Personal data must be processed lawfully, fairly, and transparently, ensuring accuracy and security.
Data Subject Rights Individuals have the right to be informed of the collection and processing of their personal data, the right to access their data, request its erasure and correction, and object to its processing for appropriate purpose.
Data Controllers and Processors Entities must register with the Ethiopian Communications Authority before processing personal dat.
Data Breach Notification In the event of a data breach, organizations are obligated to notify affected individuals prompt.
Cross-Border Data Transfers The proclamation prohibits the transfer of personal data to countries without adequate data protection unless certain conditions are mt.
Data Localization Mandates that data controllers and processors store locally collected personal data on servers in Ethiopia.
Age Verification for Minors Processing a minor’s personal data must prioritize their rights and best interests, with the data controller responsible for proving compliance.
⚖️ Enforcement and Oversight
The Ethiopian Communications Authority (ECA) is empowered to enforce both proclamations. It has the authority to establish administrative structures, regulate the processing of personal data, and impose conditions or restrictions on data transfers to third-party jurisdictions to protect data subject rights
RELATED Blog
0 comments