Law: Draft Law No. 2017 - 020 on the protection of the personal data (only available in French here) ('the Draft Law')
Regulator: Personal Data Protection Authority (not yet established)
Summary: The Law was adopted by the National Assembly on 22 June 2017 and sets out, among other things, requirements for data processing as well as data subject rights. The Law also lays the groundwork for the creation of a data protection authority. However, since the adoption of the Law there have been minimal developments. It remains to be seen when, and whether, the Law will come into effect, how it would be implemented, and whether the foundations suggested by the Prime Minister will be built upon. Mauritania is one of several jurisdictions to have signed but not yet ratified the African Union Convention on Cyber Security and Personal Data Protection.