Technology in Africa is shaped as much by policy as by innovation. Data protection laws decide how companies handle personal information, central banks decide who can move money, telecom regulators control spectrum and licensing, and tax authorities increasingly target digital services. This guide maps the main areas of tech policy and the institutions behind them.
Laws and regulations change frequently. This guide is general information, not legal advice; always check official sources and consult a qualified lawyer.
1. Data protection and privacy
More than half of African countries now have data protection laws, many modelled on principles similar to Europe’s GDPR. Key examples include Nigeria’s Data Protection Act 2023, Kenya’s Data Protection Act 2019 and South Africa’s Protection of Personal Information Act (POPIA). They typically require a lawful basis for processing, transparency, security safeguards, breach notification and limits on transfers abroad, enforced by an independent data protection authority. Compare them in Data Protection Laws in Africa.
2. Cybercrime and cybersecurity
Many countries have cybercrime laws that criminalise hacking, online fraud and identity theft, and set up national computer emergency response teams (CERTs). Some of these laws have been criticised for vague provisions that can be used against journalists and critics. At continental level, the African Union’s Malabo Convention covers cybersecurity, cybercrime and data protection; see The Malabo Convention Explained.
3. Fintech and payments regulation
Central banks license payment service providers, mobile money operators, digital banks and lenders, and set rules on customer funds, KYC, transaction limits and consumer protection. Many have introduced regulatory sandboxes and open banking frameworks; see What Is Open Banking? and Fintech in Africa Explained.
4. Telecommunications
Telecom regulators license operators, allocate spectrum for 4G and 5G, enforce SIM registration and set quality-of-service rules. Their decisions affect data prices and coverage; see Internet Connectivity in Africa. Internet shutdowns ordered by governments remain a major concern for businesses and rights groups.
5. Digital taxation
Governments are taxing the digital economy through VAT on foreign digital services, digital services taxes and significant economic presence rules, as well as levies on mobile money and telecom services. See How Digital Services Taxes Work in Africa.
6. Startup acts
Countries including Tunisia, Senegal and Nigeria have passed startup acts that define startups and offer incentives. Read The Nigeria Startup Act Explained.
7. Artificial intelligence
The African Union endorsed a Continental AI Strategy in 2024, and several countries have published national AI strategies or policies. Most focus on skills, infrastructure, data and ethical principles rather than strict regulation for now. See National AI Strategies in Africa.
8. Digital trade and continental integration
The African Continental Free Trade Area (AfCFTA) includes a Digital Trade Protocol, adopted by the AU in 2024, which aims to harmonise rules on e-commerce, digital payments, data flows and digital identity across member states. The AU’s Digital Transformation Strategy for Africa (2020 to 2030) and Data Policy Framework set wider goals.
Who regulates what
| Area | Typical regulator |
|---|---|
| Personal data | Data protection authority or commission |
| Payments, mobile money, banking | Central bank |
| Investments, crypto assets | Securities or capital markets regulator |
| Telecoms and spectrum | Communications regulator |
| Competition | Competition authority |
| Digital tax | Revenue authority |
| Consumer protection | Consumer protection agency |
