In July, the European Commission (EC) adopted an adequacy decision for the EU-US Data Privacy Framework, allowing the free flow of data from the EU to the US if US companies comply with the Framework. The EC is expected to consider adopting adequacy decisions for African countries and other regions that have privacy laws modeled on the EU’s General Data Protection Regulations (GDPR). While the EU-US adequacy decision provides certainty for transatlantic data transfers, the adequacy of data flows with Africa remains uncertain. African countries, including South Africa, Algeria, Eswatini, Tanzania, Botswana, Kenya, Uganda, and others, have implemented privacy laws, but additional safeguards are currently required for data transfers from the EU to Africa. The EC may focus on launching adequacy decisions to assess data protection laws in African countries in the future, given the increasing flow of data between the EU and Africa. Many African data privacy laws have similarities to the GDPR, making adequacy decisions more likely for countries like Ghana, Kenya, Mauritius, Nigeria, Uganda, Rwanda, South Africa, and Morocco.
By FCCT Editorial Team

