Archive · May 2026
The 4 archive entries on developments from May 2026.
Rwanda's Law No.
The NDPC executed two memoranda of understanding on 8 May 2026, one with the Bureau of Public Procurement and one with the Nigeria Governors' Forum. The Bureau of Public Procurement agreement threads data protection compliance into federal procurement, making every vendor and contractor in the government supply chain auditable on NDPA grounds as part of contract compliance.
The UK Information Commissioner's Office published guidance on 6 May 2026 to help public authorities handle Freedom of Information requests involving or generated by AI systems, addressing the rising volume of AI-generated requests and how existing FOI principles apply to them. The ICO's frameworks routinely surface in Kenyan, Nigerian and South African regulatory guidance within a few quarters of publication.
The NDPC hosted a two-day peer exchange in Abuja on 4 and 5 May 2026, bringing data protection regulators from nine African countries and multilateral institutions together to discuss cross-border enforcement coordination. Continental coordination among regulators has been discussed for years, but this meeting was distinguished by the enforcement position of the host: Nigeria convened the exchange while the Temu investigation, the CAC probe and the April advisory were all active, which made the session a working exchange of live case strategies rather than a general discussion. For organisations operating across multiple African jurisdictions, this points toward synchronised regulatory scrutiny, where an enforcement approach tested by one authority is more likely to be applied by its neighbours.
Enforcement decisions, new laws and regulatory movement across African jurisdictions, in one brief. Free, and built to be forwarded to the colleague who needs it.
Your address goes to our email service provider and is used to send you the Digest, nothing else. Unsubscribe in one click, in every issue. Privacy policy. This site itself sets no cookies.