The East African Community (EAC) has advanced efforts to create a common legal framework for personal data protection and cybersecurity, following a week-long meeting of the Technical Working Group (TWG) under the Eastern Africa Regional Digital Integration Project (EARDIP).
The Second TWG meeting in Dar es Salaam, brought together experts from Partner States to align on principles that will govern cross-border data flows while safeguarding citizens’ rights.
The framework aims to bolster trust in digital services, secure cross-border transactions, and support the growth of the EAC’s envisioned Single Digital Market.
Chairing the meeting, Gisiora Dickson Ochoki, Kenya’s Director of Cyber Security, said the process builds on the groundwork laid in the first TWG session.
“Our continued collaboration will be critical in shaping a robust regional framework that safeguards citizens’ rights, strengthens trust, and accelerates East Africa’s journey towards a secure and integrated digital market,” he noted.
The proposed framework will establish core principles such as lawfulness, fairness, transparency, data minimisation, and confidentiality. It will also guarantee individual rights including access, correction, erasure, portability, and safeguards against automated decision-making.
Partner States further discussed practical mechanisms for cross-border transfers, such as Standard Contractual Clauses and Binding Corporate Rules, while emphasising cooperation among national data protection authorities.
With some EAC members already having national data protection laws and others yet to legislate, the regional framework is expected to bridge gaps, harmonise standards, and ensure uniform safeguards.
The concept of a “Single Data Territory,” mirroring the bloc’s Single Customs Territory, was floated as a way to streamline data movement across borders.
The EAC Secretariat, together with Partner States, will now spearhead the drafting of a regional legal instrument for policy consideration.
Once adopted, the framework is expected to enhance cybersecurity, build digital trust, and unlock new opportunities in the region’s digital economy.
Source: The East African Secretariat