Somalia Data Protection Authority Enforces Nationwide Data Compliance Rules

The Data Protection Authority  has issued an official notice requiring all data controllers and data processors operating in Somalia to comply with mandatory registration requirements under the country’s Data Protection Law.

In the statement, the Authority said the directive is based on Article 32 of the Data Protection Act and applies to all entities that collect, store, process, or share personal data within the country. The aim is to strengthen the protection of personal information and ensure full compliance with national data governance standards.

The regulator confirmed that it has begun accepting registration applications from organisations and will issue official certificates only to those that meet all required conditions set out in the law and regulatory guidelines.

All companies and institutions involved in handling personal data have been instructed to adhere to the registration process and comply with obligations related to data protection, including proper handling, storage, and usage of personal information.

The Authority also noted that detailed information on registration requirements, application procedures, and related forms is available on its official website, while enquiries can be directed via its official email address or through its offices during working hours.