Middle East and Africa data protection laws

Saudi Arabia, the UAE, Israel, South Africa, Nigeria, Kenya and more.

FewerMore laws

7 countries and blocs with tracked laws (US states on the US map). Tap one to open it.

12 regulations

Add to calendar

Apple Calendar or Outlook Google Calendar Download .ics

12 of 12 regulations

Sort

		Status
Egypt PDPL Law No. 151 of 2020 on the Protection of Personal Data and its Executive Regulations	Egypt	In force	Oct 16, 20205 years ago	Nov 2, 2026in 5 weeks One-year compliance window ends
UAE Child Digital Safety Law Federal Decree by Law No. 26 of 2025 Regarding Child Digital Safety	United Arab Emirates	In force	Jan 1, 20268 months ago	Jan 1, 2027in 3 months Compliance deadline under the Decree by Law
Bahrain PDPL Law No. 30 of 2018 on the Protection of Personal Data	Bahrain	In force	Aug 1, 20197 years ago	None upcoming
Israel Privacy Protection Law Amendment 13 Privacy Protection Law, 5741-1981 (Amendment No. 13)	Israel	Amended	Aug 14, 20251 year ago	None upcoming
Kenya Computer Misuse and Cybercrimes Act Computer Misuse and Cybercrimes Act, 2018	Kenya	Amended	May 30, 20188 years ago	None upcoming
Kenya Data Protection Act Data Protection Act, 2019 (No. 24 of 2019)	Kenya	In force	Nov 25, 20196 years ago	None upcoming
Nigeria NDPA Nigeria Data Protection Act, 2023 and NDPA General Application and Implementation Directive (GAID) 2025	Nigeria	Amended	Jun 12, 20233 years ago	None upcoming
Rwanda DPP Law Law No. 058/2021 of 13/10/2021 relating to the Protection of Personal Data and Privacy	Rwanda	In force	Oct 15, 20214 years ago	None upcoming
Saudi PDPL Personal Data Protection Law (Royal Decree M/19 of 9/2/1443H, as amended by Royal Decree M/148 of 5/9/1444H)	Saudi Arabia	In force	Sep 14, 20233 years ago	None upcoming
South Africa Cybercrimes Act Cybercrimes Act 19 of 2020	South Africa	In force	Dec 1, 20214 years ago	None upcoming
South Africa POPIA Protection of Personal Information Act, 2013 (Act No. 4 of 2013)	South Africa	In force	Jul 1, 20206 years ago	None upcoming
UAE PDPL Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data	United Arab Emirates	In force	Jan 2, 20224 years ago	None upcoming

Upcoming deadlines

Date	Regulation	What happens	When
Nov 22026in 5 weeks	Egypt PDPLEgypt PDPLEgypt One-year compliance window endstentative	One-year compliance window endstentative	in 37d
Jan 12027in 3 months	UAE Child Digital Safety LawUAE Child Digital Safety LawUnited Arab Emirates Compliance deadline under the Decree by Law	Compliance deadline under the Decree by Law	in 3mo
Jun 302027in 9 months	UAE Child Digital Safety LawUAE Child Digital Safety LawUnited Arab Emirates Social media platforms' transition ends	Social media platforms' transition ends	in 9mo

Past deadlines

Date	Regulation	What happens	When
Jun 3020262 months ago	UAE Child Digital Safety LawUAE Child Digital Safety LawUnited Arab Emirates Social media minimum age resolution takes effect	Social media minimum age resolution takes effect	3mo ago
Jan 120268 months ago	UAE Child Digital Safety LawUAE Child Digital Safety LawUnited Arab Emirates Child Digital Safety Law takes effect	Child Digital Safety Law takes effect	9mo ago
Nov 4202510 months ago	Kenya Computer Misuse and Cybercrimes ActKenya Computer Misuse and Cybercrimes ActKenya 2025 amendments commence	2025 amendments commence	11mo ago
Nov 2202510 months ago	Egypt PDPLEgypt PDPLEgypt Executive Regulations take effect	Executive Regulations take effect	11mo ago
Sep 1920251 year ago	Nigeria NDPANigeria NDPANigeria GAID 2025 takes effect	GAID 2025 takes effect	12mo ago
Aug 1420251 year ago	Israel Amdt 13Israel Privacy Protection Law Amendment 13Israel Amendment 13 in force	Amendment 13 in force	13mo ago
Sep 1420242 years ago	Saudi PDPLSaudi PDPLSaudi Arabia One-year grace period ends	One-year grace period ends	2y ago
Oct 1520232 years ago	Rwanda DPP LawRwanda DPP LawRwanda Two-year transition ends	Two-year transition ends	2.9y ago
Sep 1420233 years ago	Saudi PDPLSaudi PDPLSaudi Arabia PDPL in force	PDPL in force	3y ago
Jun 1220233 years ago	Nigeria NDPANigeria NDPANigeria NDPA signed into law	NDPA signed into law	3.3y ago
Jan 220224 years ago	UAE PDPLUAE PDPLUnited Arab Emirates PDPL enters into force	PDPL enters into force	4.7y ago
Dec 120214 years ago	South Africa Cybercrimes ActSouth Africa Cybercrimes ActSouth Africa Most of the Act commences	Most of the Act commences	4.8y ago
Oct 1520214 years ago	Rwanda DPP LawRwanda DPP LawRwanda Law published and in force	Law published and in force	4.9y ago
Jul 120215 years ago	POPIASouth Africa POPIASouth Africa Compliance grace period ends	Compliance grace period ends	5.2y ago
Oct 1620205 years ago	Egypt PDPLEgypt PDPLEgypt PDPL takes effecttentative	PDPL takes effecttentative	5.9y ago
Jul 120206 years ago	POPIASouth Africa POPIASouth Africa Main POPIA provisions commence	Main POPIA provisions commence	6.2y ago
Nov 2520196 years ago	Kenya DPAKenya Data Protection ActKenya Data Protection Act in force	Data Protection Act in force	6.8y ago
Aug 120197 years ago	Bahrain PDPLBahrain PDPLBahrain PDPL takes effecttentative	PDPL takes effecttentative	7.2y ago
May 3020188 years ago	Kenya Computer Misuse and Cybercrimes ActKenya Computer Misuse and Cybercrimes ActKenya Act commences	Act commences	8.3y ago

Rule changes by email

The morning after a new data, privacy or AI law, or a deadline change; nothing in quiet weeks.