Skip to content
Quest Training

African Data Protection Laws Compliance Training Course

Applies Nigerian, Kenyan, South African, Egyptian and Rwandan data protection laws, beyond PDPL and GDPR, to registration, audit and DPO duties.

DPGP · Data Privacy, Governance & ProtectionAll Levels#3019ClassroomEnglish , Arabic
Duration
5 Days
Download BrochureView Upcoming Dates

Free substitution at any time · 30+ days' notice: full refund minus 10%. Cancellation policy

Sectors:Data, Analytics & Digital TransformationCategories:Data Privacy, Governance & Protection

Course Overview

This advanced practical course builds the capability to comply with five African data protection regimes: the Nigeria Data Protection Act (NDPA), Kenya's Data Protection Act, South Africa's Protection of Personal Information Act (POPIA), Egypt's Personal Data Protection Law and its Executive Regulations, and Rwanda's law on the protection of personal data and privacy. Unlike programs centered on the Saudi PDPL and the GDPR, it focuses on African registration, audit, licensing, and DPO obligations. The program examines each regulator and its enforcement approach: the Nigeria Data Protection Commission and its General Application and Implementation Directive (GAID), Kenya's Office of the Data Protection Commissioner, South Africa's Information Regulator, Egypt's Personal Data Protection Center, and Rwanda's National Cyber Security Authority. Participants work through scenarios covering controller registration, compliance audit returns, Information Officer duties, licensing, impact assessments, inspections, cross-border transfers, and breach notification. The course also addresses a multi-country compliance program for groups operating across African markets, including a coordinated DPO network, a single obligations register, harmonized policies with local annexes, and audit-ready evidence.

Learning Objectives

  • Analyze the scope and regulators of five African data protection regimes.
  • Compare registration, licensing, and DPO requirements across the five countries.
  • Apply the NDPA and the GAID to controller classification and obligations.
  • Prepare compliance audit returns and supporting evidence for the Nigerian regulator.
  • Assess Kenya Data Protection Act registration and impact assessment obligations.
  • Evaluate readiness for regulator compliance inspections in Kenya.
  • Apply POPIA lawful processing conditions and Information Officer responsibilities.
  • Interpret Egypt's Executive Regulations for licensing and DPO duties.
  • Apply Rwanda's registration, DPO, and data storage requirements.
  • Evaluate cross-border transfer conditions across the five jurisdictions.
  • Design breach notification procedures that meet each regulator's expectations.
  • Develop a coordinated multi-country compliance program and regulator engagement plan.

Who Should Attend

This course is designed for Data Protection Officers, Information Officers and Deputy Information Officers, Privacy Managers, Compliance Professionals, Legal and Regulatory Counsel, Data Governance Professionals, and Information Security Managers responsible for personal data in African operations. It is also suitable for IT Managers, Risk Managers, Internal Auditors, Procurement and Vendor Management Professionals, and HR Managers in government bodies, ministries, banks, telecommunications operators, oil and gas companies, and multinational groups. The program is particularly relevant to organizations operating in Nigeria, Kenya, South Africa, Egypt, or Rwanda, or across several of these markets, that must register with regulators, file audit returns, appoint DPOs, or prepare for inspections.

Learning Outcomes

  • Explain the scope and regulators of the five African data protection regimes.
  • Distinguish registration, licensing, and DPO requirements across the five jurisdictions.
  • Determine whether an entity is a controller or processor of major importance in Nigeria.
  • Prepare compliance audit returns supported by structured evidence.
  • Complete registration and impact assessment requirements under Kenya's Data Protection Act.
  • Prepare an organization for regulator inspections in Kenya and Rwanda.
  • Apply POPIA conditions and organize Information Officer responsibilities.
  • Prepare licensing and DPO registration files under Egypt's Executive Regulations.
  • Apply Rwanda's registration and data storage authorization requirements.
  • Assess cross-border transfer conditions for multi-country data flows.
  • Coordinate breach notifications to several African regulators.
  • Develop a prioritized multi-country compliance roadmap and evidence program.

Course Outline

Day 1

African Data Protection Landscape & Multi-Country Mapping

  • The African Union Convention on Cyber Security and Personal Data Protection.
  • How the five regimes differ from the PDPL and GDPR baseline.
  • Scope, territorial reach, and exemptions under each law.
  • Regulators, supervisory powers, and enforcement approaches compared.
  • Registration, licensing, and notification models across the five countries.
  • DPO and Information Officer appointment requirements compared.
  • Controller and processor definitions under each law.
  • Mapping group entities and data flows to applicable laws.
  • Building a multi-country obligations register.
  • Practical Application: Map a multinational group across the five countries and identify each entity's registration, audit, and DPO obligations.
Day 2

Nigeria: NDPA, GAID & Compliance Audit Returns

  • Structure of the NDPA and the role of the Commission.
  • Key requirements of the General Application and Implementation Directive.
  • Controllers and processors of major importance and their registration.
  • Lawful bases, consent, and data subject rights under the NDPA.
  • DPO appointment and staff data protection training.
  • Licensed Data Protection Compliance Organizations and the audit engagement.
  • Preparing compliance audit returns and supporting evidence.
  • Impact assessments, transfers, and breach notification to the Commission.
  • Investigations, compliance notices, and remediation expectations.
  • Practical Application: Outline a compliance audit return for a Nigerian bank with evidence, gaps, and remediation actions.
Day 3

Kenya & Rwanda: Registration, Impact Assessments & Inspections

  • Kenya's Data Protection Act and its supporting regulations.
  • Registering controllers and processors with the Commissioner's office.
  • Impact assessments and their submission to the Commissioner.
  • Commercial use of personal data and direct marketing in Kenya.
  • Commissioner inspections, complaints, and enforcement notices.
  • Rwanda's data protection law and the Authority's supervisory role.
  • Registration with the Authority before processing in Rwanda.
  • Authorization for storing personal data outside Rwanda.
  • DPO duties, breach notification, and transfer safeguards.
  • Practical Application: Run a simulated inspection of a telecommunications operator in Kenya and Rwanda and record findings.
Day 4

South Africa POPIA & Egypt PDPL Executive Regulations

  • The eight POPIA conditions for lawful processing.
  • Registering Information Officers with the Information Regulator.
  • The PAIA manual, prior authorization, and direct marketing rules.
  • Security compromise notification and Regulator assessments.
  • Scope and sector exclusions of Egypt's Personal Data Protection Law.
  • Controller and processor licenses from the Personal Data Protection Center.
  • DPO appointment and registration under the Executive Regulations.
  • Sensitive data, electronic marketing, and transfer licensing in Egypt.
  • Breach notification and record-keeping expected by the Center.
  • Practical Application: Prepare a South Africa and Egypt readiness file covering Information Officer registration, licensing, and DPO appointment.
Day 5

Multi-Country Compliance Program & Regulator Engagement

  • A group data protection operating model for African markets.
  • A coordinated network of DPOs and Information Officers.
  • Harmonized group policies with country annexes.
  • Intra-group transfer arrangements and processor contracts.
  • A consolidated registration, licensing, and audit tracker.
  • Coordinating multi-country breach response and notifications.
  • Evidence for audits, inspections, and regulator requests.
  • Board reporting, metrics, and regulatory change monitoring.
  • Prioritizing remediation by regulatory exposure and business impact.
  • Final Workshop: Develop a multi-country roadmap covering registrations, licenses, audit returns, DPO roles, transfers, breach response, and regulator engagement.

Upcoming Dates

Selected date

Dammam · 14 – 18 Feb 2027 · Classroom

Need more details?Chat with us on WhatsApp

CityDatesPrice per ParticipantEarly Bird
LondonScheduled
2 – 6 Nov 2026€5,600—
SelectDownload Brochure
LisbonScheduled
2 – 6 Nov 2026€5,400—
SelectDownload Brochure
MadinahScheduled
9 – 13 Nov 2026€4,200—
SelectDownload Brochure
MakkahScheduled
16 – 20 Nov 2026€4,200—
SelectDownload Brochure
MadridScheduled
16 – 20 Nov 2026€5,400—
SelectDownload Brochure
ManamaScheduled
23 – 27 Nov 2026€4,700€4,230until 2 Nov
SelectDownload Brochure
MarbellaScheduled
30 Nov – 4 Dec 2026€5,400€4,860until 9 Nov
SelectDownload Brochure
OnlineScheduled
6 – 10 Dec 2026€1,700€1,530until 16 Nov
SelectDownload Brochure
MuscatScheduled
7 – 11 Dec 2026€5,300€4,770until 16 Nov
SelectDownload Brochure
ParisScheduled
14 – 18 Dec 2026€5,700€5,130until 23 Nov
SelectDownload Brochure
SalalahScheduled
21 – 25 Dec 2026€5,300€4,770until 30 Nov
SelectDownload Brochure
AbujaScheduled
21 – 25 Dec 2026€5,100€4,590until 30 Nov
SelectDownload Brochure
AccraScheduled
28 Dec 2026 – 1 Jan 2027€5,100€4,590until 7 Dec
SelectDownload Brochure
AmmanScheduled
3 – 7 Jan 2027€3,100€2,790until 14 Dec
SelectDownload Brochure
AmsterdamScheduled
4 – 8 Jan 2027€5,400€4,860until 14 Dec
SelectDownload Brochure
BangkokScheduled
11 – 15 Jan 2027€6,100€5,490until 21 Dec
SelectDownload Brochure
BarcelonaScheduled
18 – 22 Jan 2027€5,400€4,860until 28 Dec
SelectDownload Brochure
BeirutScheduled
24 – 28 Jan 2027€4,000€3,600until 4 Jan
SelectDownload Brochure
BerlinScheduled
25 – 29 Jan 2027€5,800€5,220until 4 Jan
SelectDownload Brochure
CairoScheduled
31 Jan – 4 Feb 2027€3,300€2,970until 11 Jan
SelectDownload Brochure
CasablancaScheduled
8 – 12 Feb 2027€4,300€3,870until 18 Jan
SelectDownload Brochure
Cape TownScheduled
8 – 12 Feb 2027€5,100€4,590until 18 Jan
SelectDownload Brochure
DammamScheduled
14 – 18 Feb 2027€4,200€3,780until 25 Jan
✓ SelectedDownload Brochure
DohaScheduled
21 – 25 Feb 2027€4,400€3,960until 1 Feb
SelectDownload Brochure
ErbilScheduled
28 Feb – 4 Mar 2027€3,100€2,790until 8 Feb
SelectDownload Brochure
DubaiScheduled
28 Feb – 4 Mar 2027€4,400€3,960until 8 Feb
SelectDownload Brochure
IstanbulScheduled
8 – 12 Mar 2027€4,700€4,230until 15 Feb
SelectDownload Brochure
JeddahScheduled
14 – 18 Mar 2027€4,200€3,780until 22 Feb
SelectDownload Brochure
KigaliScheduled
15 – 19 Mar 2027€5,100€4,590until 22 Feb
SelectDownload Brochure
Kuala LumpurScheduled
22 – 26 Mar 2027€4,400€3,960until 1 Mar
SelectDownload Brochure

Available in: Istanbul · Dubai · London · Doha · Amsterdam

Related Courses

Ready to Elevate Your Team's Capabilities?

Speak with our advisors about upcoming programmes or a bespoke corporate training plan.

Download BrochureContact Our Team