Law: Law No. 2017-28 of 3 May 2017 on the Protection of Personal Data (only available in French here) ('the Law'), Decree No. 2020-309/PRN/MJ of April 30, 2020 setting the terms of application of Law No. 2017-28 of May 3, 2017 on the protection of personal data (only available in French here) as amended and supplemented by Law No. 2019-71 of December 24, 2019 (only available in French here), and Order No. 000045 of October 5, 2020 determining the profile and setting the conditions of remuneration of the personal data protection correspondent (only available in French here).
Regulator: High Authority for the Protection of Personal Data ('HAPDP')
Summary: The Law establishes a fundamental basis for personal data protection in Niger by, among other things, setting out data subject rights of access, to object, and to information, restricting international data transfers, requiring data processing notifications, and detailing obligations for data controllers, such as the appointment of a personal data protection correspondent. While the Law addresses this essential basis, it does not cover topics such as data breach notifications. There are also additional relevant data protection provisions in the Law No. 2018-45 of 12 July 2018 on Electronic Communications (only available in French here) and Law on Cybercrime of 2019 (only available to download in French here). The HAPDP announced (only available in French here) the official launch of its activities on 5 August 2020.