Skip to main content
NOPE
In Effect Law Data Protection

Botswana DPA

Data Protection Act 2024

Botswana's modernized data protection law requiring Data Protection Impact Assessment and establishing age 16 for consent.

Jurisdiction

Botswana

Enacted

Aug 1, 2024

Effective

Oct 1, 2024

Enforcement

Data Protection Commissioner

Replaced 2018 Act with enhanced protections

Strathmore CIPIT Analysis

Why It Matters

Botswana's 2024 Act is Africa's most recent data protection modernization, establishing clear age 16 consent threshold and mandatory DPIA for AI systems.

Recent Developments

Enacted August 2024, replaced 2018 Act with stronger AI-era protections

At a Glance

Applies to

AI CompanionMental Health AppGeneral Chatbot

Who Must Comply

  • Data controllers and processors in Botswana
  • Entities processing data of Botswana residents
  • High-risk AI systems processing personal data

Obligations fall on:

Safety Provisions

  • Children 16+ may consent; under 16 requires guardian consent
  • Mandatory Data Protection Impact Assessment for high-risk processing
  • Breach notification required
  • Data Protection Officer for certain controllers
  • Cross-border transfer restrictions

Compliance & Enforcement

Penalties

criminal liability

Criminal liability

View on map

Botswana

Focus Areas

Mental health & crisis
Child safety
Algorithmic accountability

Cite This

APA

Botswana. (2024). Data Protection Act 2024.

Related Regulations

In Effect ZM

Zambia DPA

Zambia's comprehensive data protection law with special protections for vulnerable persons and DPIA requirements for high-risk processing.

In Effect SC

Seychelles DPA

Seychelles' modern data protection law requiring DPO for large-scale processing and recognizing Cross-Border Privacy Rules certification.

In Effect DZ

Algeria Law 18-07

Algeria's data protection law with mandatory DPO requirement added by 2025 amendment and 5-day breach notification.

In Effect RW

Rwanda AI Policy

First African country to adopt comprehensive national AI policy. Establishes Responsible AI Office (RAIO) under MINICT. Implements RURA ethical guidelines covering beneficence, non-maleficence, autonomy, justice, explicability, transparency. Non-binding framework.

Proposed KE

Kenya AI Bill

First comprehensive AI bill in Sub-Saharan Africa. Proposes creation of AI Commissioner, AI Authority, and Advisory Committee. Establishes risk-based regulatory model aligned with EU AI Act framework, criminalizes harmful deepfakes, and mandates AI content labeling.

Enacted US-CA

CA SB 1276

Amends California's sexual-exploitation-of-a-child offence (Penal Code Section 311.3) so that it covers digitally altered or artificial-intelligence-generated matter depicting a person under 18 engaged in sexual conduct, and adds knowingly downloading, streaming or accessing such matter through electronic or digital media to the prohibited conduct. It makes the same extension to the definition of sexual exploitation that triggers mandated reporting under the Child Abuse and Neglect Reporting Act (Section 11165.1).

All regulations See what's likely relevant to your deployment

Last updated January 22, 2026. Verify against primary sources before relying on this information.