Burundi Passes Historic Personal Data Protection Law to Strengthen Digital Privacy

Bujumbura, January 15, 2026 — Burundi has entered a new chapter in its digital transformation with the adoption of a landmark Personal Data Protection Law, a move aimed at safeguarding citizens’ privacy amid the rapid expansion of digital technologies.

The legislation was approved by the National Assembly during a plenary session held at the Kigobe Congress Palace, under the leadership of Assembly President Daniel Gélase Ndabirabe. The vote marks one of the country’s most significant legal reforms in the area of digital governance and cybersecurity.

Putting Citizens at the Heart of the Digital Economy

Presenting the bill before lawmakers, Minister of the Interior Léonidas Ndaruzaniye underscored the urgency of establishing a strong legal framework as personal data collection and digital platforms continue to grow across both public and private sectors.

According to the minister, the widespread use of digital tools has led to increased storage, processing, and sharing of personal information, making citizens more vulnerable to data misuse. The new law, he said, is designed to ensure that technological progress does not come at the expense of fundamental rights and individual freedoms.

Strong Sanctions to Deter Data Abuse

To enforce compliance, the law introduces clear and strict penalties for violations of personal data protection rules. These sanctions will complement existing legal instruments, including the Penal Code and laws regulating crimes committed through information and communication technologies (ICTs).

Authorities say this layered legal approach demonstrates the government’s commitment to zero tolerance for data-related offenses, particularly those that threaten privacy, security, and public trust in digital systems.

Independent Oversight and Institutional Accountability

One of the most notable aspects of the new legislation is the creation of an independent administrative authority dedicated to overseeing personal data protection in Burundi. In addition, a specialized body will be responsible for implementing, monitoring, and enforcing data protection regulations across institutions.

This governance structure is expected to enhance transparency, accountability, and confidence in how personal data is handled nationwide.

A Comprehensive Legal Framework for the Digital Age

Structured into eight chapters, the law clearly defines:

• The rights of individuals regarding the processing of their personal data
• The obligations of data controllers and processors
• The institutional mechanisms responsible for data protection oversight

Together, these provisions position Burundi alongside other nations that are modernizing their legal systems to respond to emerging digital challenges.

Toward a Secure and Responsible Digital Future

With the adoption of this law, Burundi signals its determination to build a secure, citizen-centered digital environment rooted in respect for privacy, accountability, and responsible data governance.

As digital services continue to expand, the new framework is expected to play a crucial role in protecting citizens while supporting innovation and sustainable digital development.