Angola Law 22/11
Law 22/11 on the Protection of Personal Data
Angola's data protection law establishing right to non-automated individual decisions and requiring express consent for data processing.
Jurisdiction
Angola
Enacted
Jun 17, 2011
Effective
Oct 1, 2019
Enforcement
Angolan Data Protection Authority
Why It Matters
Angola's right to non-automated decisions requires AI chatbots making significant determinations to provide human review pathway.
At a Glance
Applies to
Requires
Who Must Comply
- Data controllers and processors in Angola
- Entities using automated decision-making
- Cross-border data transfers from Angola
Safety Provisions
- Right to non-automated individual decisions
- Express consent required for data processing
- Security measures for personal data
- Data controller registration
- Cross-border transfer restrictions
Compliance & Enforcement
Penalties
Fines for violations
View on map
Angola
Focus Areas
Cite This
APA
Angola. (2011). Law 22/11 on the Protection of Personal Data.
Related Regulations
Zambia DPA
Zambia's comprehensive data protection law with special protections for vulnerable persons and DPIA requirements for high-risk processing.
Botswana DPA
Botswana's modernized data protection law requiring Data Protection Impact Assessment and establishing age 16 for consent.
Seychelles DPA
Seychelles' modern data protection law requiring DPO for large-scale processing and recognizing Cross-Border Privacy Rules certification.
Rwanda AI Policy
First African country to adopt comprehensive national AI policy. Establishes Responsible AI Office (RAIO) under MINICT. Implements RURA ethical guidelines covering beneficence, non-maleficence, autonomy, justice, explicability, transparency. Non-binding framework.
Kenya AI Bill
First comprehensive AI bill in Sub-Saharan Africa. Proposes creation of AI Commissioner, AI Authority, and Advisory Committee. Establishes risk-based regulatory model aligned with EU AI Act framework, criminalizes harmful deepfakes, and mandates AI content labeling.
CA SB 1276
Amends California's sexual-exploitation-of-a-child offence (Penal Code Section 311.3) so that it covers digitally altered or artificial-intelligence-generated matter depicting a person under 18 engaged in sexual conduct, and adds knowingly downloading, streaming or accessing such matter through electronic or digital media to the prohibited conduct. It makes the same extension to the definition of sexual exploitation that triggers mandated reporting under the Child Abuse and Neglect Reporting Act (Section 11165.1).
Last updated January 22, 2026. Verify against primary sources before relying on this information.