Middle East and Africa data protection laws

Saudi Arabia, the UAE, Israel, South Africa, Nigeria, Kenya and more.

FewerMore laws

6 jurisdictions with tracked laws. Tap one to open it.

6 regulations

Add to calendar

Sort

		Status
Israel Privacy Protection Law Amendment 13 Privacy Protection Law, 5741-1981 (Amendment No. 13)	Israel	Amended	Aug 14, 2025	None upcoming
Kenya Data Protection Act Data Protection Act, 2019 (No. 24 of 2019)	Kenya	In force	Nov 25, 2019	None upcoming
Nigeria NDPA Nigeria Data Protection Act, 2023 and NDPA General Application and Implementation Directive (GAID) 2025	Nigeria	Amended	Jun 12, 2023	None upcoming
Saudi PDPL Personal Data Protection Law (Royal Decree M/19 of 9/2/1443H, as amended by Royal Decree M/148 of 5/9/1444H)	Saudi Arabia	In force	Sep 14, 2023	None upcoming
South Africa POPIA Protection of Personal Information Act, 2013 (Act No. 4 of 2013)	South Africa	In force	Jul 1, 2020	None upcoming
UAE PDPL Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data	United Arab Emirates	In force	Jan 2, 2022	None upcoming

Israel Privacy Protection Law Amendment 13
Israel
AmendedPrivacyBreach notification
Effective Aug 14, 2025
Kenya Data Protection Act
Kenya
In forcePrivacyBreach notification
Effective Nov 25, 2019
Nigeria NDPA
Nigeria
AmendedPrivacyBreach notification
Effective Jun 12, 2023
Saudi PDPL
Saudi Arabia
In forcePrivacyData residency
Effective Sep 14, 2023
South Africa POPIA
South Africa
In forcePrivacyBreach notification
Effective Jul 1, 2020
UAE PDPL
United Arab Emirates
In forcePrivacyBreach notification
Effective Jan 2, 2022

Sep192025
Nigeria NDPANigeria
GAID 2025 takes effect
General Application and Implementation Directive becomes effective, replacing the NDPR 2019 and NDPR Implementation Framework.
Takes effect12 months agoSource

Aug142025
Israel Privacy Protection Law Amendment 13Israel
Amendment 13 in force
Amended Privacy Protection Law, PPA enforcement powers and statutory damages take effect.
Takes effect13 months agoSource

Sep142024
Saudi PDPLSaudi Arabia
One-year grace period ends
Grace period for controllers to comply ends; PDPL fully enforceable.
Enforcement2 years agoSource

Sep142023
Saudi PDPLSaudi Arabia
PDPL in force
PDPL and its implementing regulations take effect.
Takes effect3 years agoSource

Jun122023
Nigeria NDPANigeria
NDPA signed into law
President signs the Nigeria Data Protection Act, 2023.
Takes effect3.3 years agoSource

Jan22022
UAE PDPLUnited Arab Emirates
PDPL enters into force
Decree-law takes effect; compliance obligations tied to Executive Regulations.
Takes effect4.7 years agoSource

Jul12021
South Africa POPIASouth Africa
Compliance grace period ends
Responsible parties must comply; Regulator enforcement begins (grace period ended 30 June 2021).
Enforcement5.2 years agoSource

Jul12020
South Africa POPIASouth Africa
Main POPIA provisions commence
Most sections commence with a 12-month grace period.
Takes effect6.2 years agoSource

Nov252019
Kenya Data Protection ActKenya
Data Protection Act in force
Act commences.
Takes effect6.8 years agoSource