About Us
About The DPA Somalia
The Data Protection
Authority of Somalia
Our Mission
The Data Protection Authority (DPA) is dedicated to fostering a culture of accountability and trust by ensuring that all businesses, private entities, and public institutions govern and process personal data responsibly, transparently, and in full compliance with legal and ethical standards. Our mission extends to empowering individuals with their data rights while advancing innovation in privacy protection.
The Somalia Data Protection Authority (DPA) is the national independent authority responsible for protecting personal privacy and monitoring that all organizations are compliant with the Data Protection Act (no.005 which was passed in March 2023).
The role of DPA is to implement the Data Protection Act, as well as providing services that facilitate protection of personal data, such as; awareness campaigns, registration, trainings, creating and passing regulations specific to storing and processing data.
All citizens have the right to the privacy of their personal data, and that is a fundamental right. The Data Protection Authority has been entrusted by the federal government of Somalia to safeguard that right, and is responsible for ensuring compliance with the Data Protection Act. The Act gives citizens’ the autonomy to decide how their data is processed, used and who it is shared with.
What We Do
Regulation
The Data Protection Authority (DPA) in Somalia regulates andoversees data protection, ensuring that organizations and entitiesadhere to established guidelines and laws governing the responsible handling of personal information.
Awareness Campaign
The Data Protection Authority (DPA) in Somalia enhances awareness through educational campaigns, training programs, and public outreach, aiming to inform and equip individuals and organizations with the knowledge needed to uphold data protection principles and foster a culture of privacy.
Enforcement and Compliance
The DPA plays a crucial role in enforcing data protection regulations, holding organizations accountable for their data management practices. It strives to ensure compliance with both national laws and international privacy principles, promoting transparency and trust in the handling of sensitive information.
Our Principles
Don’t store personal data you do not need anymore.
Personal data should be collected for a specific and lawful purpose.
Information should be accurate, up-to-date, and kept for a limited time, ensuring accuracy.
Information should be processed legally and ethically while upholding justice.
Personal data should be minimal and be the exact amount of data that is needed.
Process personal data with fairness and accountability, adhering to privacy principles.
Entities must safeguard individuals' data, uphold their rights, and implement measures for data integrity.