Regulatory Scrutiny Intensifies for Digital Businesses in Africa

Africa’s digital economy is undergoing a significant transformation as data protection authorities across the continent become more active in enforcing regulations. According to a recent report by Yellow Card, a stablecoin infrastructure provider, 39 of 45 countries with adopted data protection laws now have fully operational authorities.

Key Enforcement Actions

• Nigeria: The Data Protection Commission fined MultiChoice USD 500,000 for privacy violations deemed “patently intrusive.” Regulators are also pursuing a settlement with Meta over data breaches.
• Uganda: Secured its first criminal data conviction in July 2025, imprisoning a digital lender director for unauthorized use of personal data.
• Kenya: Banking, energy, and telecom firms have all faced fines from the Office of the Data Protection Commissioner.
• Tanzania: A company was fined by the High Court for using a newborn’s photo on Instagram without consent.

AI Governance Emerges as Next Frontier

Beyond data protection, 16 African countries have developed national AI strategies. Nigeria, Angola, Morocco, and Namibia are among those moving toward binding legislation:

• Angola: Proposed draft law includes fines up to USD 1.6 million and prison sentences of up to 12 years for intentional misuse.

These developments signal a clear shift from policy adoption to active enforcement across the continent.