Somalia Launches Registration of Institutions Handling Personal Data

GOOBJOOG NEWS | MOGADISHU: Somalia’s Data Protection Authority (DPA) has begun the registration of government institutions and private companies that collect, process or store personal data, marking a significant step in the country’s efforts to strengthen digital governance and protect citizens’ privacy in an increasingly connected economy.

In a public notice, the Authority said the registration exercise is being carried out under Article 32 of Somalia’s Data Protection Act, Law No. 005 of 2023, which established the country’s legal framework for the protection of personal information.

The DPA directed all data controllers and data processors operating in Somalia to register with the Authority, warning that compliance is a legal obligation for organizations handling citizens’ data.

The move is part of broader reforms by the Federal Government of Somalia aimed at building modern state institutions, improving digital security and aligning the country with international standards on data protection and privacy.

“The registration process has officially commenced, and institutions that meet the requirements will be issued with formal registration certificates,” the Authority said.

The directive applies to a wide range of organizations, including government agencies, telecommunications firms, banks, fintech companies, healthcare providers, educational institutions, non-governmental organizations and other entities that collect or process personal information.

Somalia has witnessed rapid growth in digital services in recent years, driven by the expansion of mobile money platforms, digital banking, online government services and the rollout of national identification initiatives. As more citizens interact with institutions through digital channels, concerns over data security, privacy and accountability have become increasingly important.

The registration exercise follows the launch earlier this month of a new oversight and monitoring framework by the Data Protection Authority designed to improve accountability among institutions handling personal data. Authorities say the system will help ensure that organizations adopt stronger safeguards against misuse, unauthorized access and breaches involving citizens’ information.

The Data Protection Act, signed into law by President Hassan Sheikh Mohamud in 2023, created the independent Data Protection Authority and introduced rules governing how personal data is collected, stored, processed and transferred within Somalia. The law also grants citizens rights over their personal information, including access, correction and protection against unlawful use of their data.

Analysts say the latest step reflects Somalia’s efforts to build confidence in its growing digital economy and attract investment by strengthening regulatory institutions. Across East Africa, governments have increasingly moved to tighten oversight of personal data as digital financial services and online platforms become central to economic activity.

For Somalia, the registration initiative is also viewed as an important milestone in the country’s state-building agenda, reinforcing federal institutions while ensuring that public and private entities handling sensitive information operate under a clear legal framework.

Institutions seeking registration have been advised to complete the process through the Authority’s online portal and comply with all requirements set out under the Data Protection Act.