South Africa, Nigeria, Kenya, Egypt

Africa: compliance guide

Many African countries have enacted data protection laws in recent years. South Africa's POPIA is the longest established.

Version
2026.10
Last updated
3 October 2026
Issued by
Vedatra Scalable Stacks Private Limited
Browse all legal documents

1.Data protection, recording, and messaging

South Africa's Protection of Personal Information Act (POPIA) requires lawful processing, security safeguards, notice of breaches, and conditions for transferring data abroad. The Information Regulator enforces it. Nigeria's Data Protection Act 2023, Kenya's Data Protection Act 2019, and Egypt's Personal Data Protection Law add registration, data protection officer, and transfer conditions. Direct marketing generally needs opt-in consent, and telecom licensing rules limit who may provide public voice services.

We do not hold telecom licences in these countries. Our DPA provides processor commitments, and customers must use licensed local operators for public voice service.

This page is a general summary of how Callfora approaches the law in this region. It is not legal advice, laws change, and your obligations depend on your own facts. Ask your counsel before relying on it.

Need help with this document?

Choose the route that matches your question. These links do not replace the terms above.