Burundi Adopts Landmark Personal Data Protection Law to Safeguard Citizens in the Digital Era
A key feature of the legislation is the establishment of an independent administrative authority tasked with overseeing personal data protection.
Burundi has taken a significant step toward strengthening digital governance with the adoption of a new bill on personal data protection. The National Assembly convened on January 15, 2026, at the Kigobe Congress Palace to examine and approve the legislation, under the leadership of Assembly President Daniel Gélase Ndabirabe.
The bill is designed to place citizens at the center of Burundi’s evolving digital ecosystem. Addressing lawmakers, the Minister of the Interior, Léonidas Ndaruzaniye, highlighted that the rapid growth of digital technologies has led to increased collection, centralization, and use of personal data, making a robust legal framework essential to safeguard citizens’ information.
The minister emphasized that the law is intended to balance technological progress with the protection of fundamental rights and individual freedoms. By aligning with modern digital realities, the legislation seeks to prevent misuse of personal data while ensuring responsible and transparent data handling practices.
To reinforce compliance, the bill introduces clear sanctions for breaches of personal data protection rules. These penalties will operate alongside existing legal instruments, including the Penal Code and laws governing offenses committed through information and communication technologies, ensuring zero tolerance for violations.
A key feature of the legislation is the establishment of an independent administrative authority tasked with overseeing personal data protection. The law also creates a dedicated body responsible for implementing and monitoring data protection regimes, strengthening institutional accountability.
Structured into eight chapters, the new law outlines the rights of individuals in relation to data processing, defines the obligations of data controllers, and sets out governance mechanisms for data protection oversight. Together, these provisions reflect Burundi’s commitment to building a secure, citizen-focused digital environment grounded in accountability and respect for privacy.
