MAURITANIA'S DATA PROTECTION ACT (LAW NO. 2017-020) KEY
SUMMERY
Mauritania's Data Protection Act (Law No. 2017-020) was enacted in 2017 to provide a comprehensive
framework for protecting personal data within the country. This law aligns with Mauritania’s
commitment to privacy standards under the African Union’s Malabo Convention, which focuses on data
protection and cybersecurity across Africa.
Key Provisions of Mauritania's Data Protection Law:
1. Individual Rights: The law gives individuals (data subjects) the right to access, correct, delete, and
restrict the processing of their personal data. It also empowers individuals to object to certain data
processing activities.
2. Consent for Processing: Personal data can only be collected and processed with explicit consent
unless there is a legal or legitimate exception. This ensures that personal data is handled transparently
and for specific purposes.
3. Data Transfers: Cross-border data transfers are regulated, permitting transfers only to countries with
adequate data protection levels or under specific conditions, such as explicit user consent or compelling
public interest.
4. Role of the Data Protection Authority (DPA ): Mauritania’s DPA oversees the enforcement of the law,
manages complaints, and ensures compliance with data protection regulations. The DPA is empowered
to enforce penalties for non-compliance and provides guidance on handling sensitive data categories,
such as health and religious information.
POINT ELABORATION
Under Mauritania's Law No. 2017-020 on data protection, several important individual rights are
granted to data subjects, ensuring their control over personal data. These rights align with global
standards for data protection and privacy. Here are the key rights outlined in the law:
1. Right to Access: Individuals have the right to access their personal data held by organizations. They
can request information about what data is being collected, how it is used, and who it is shared with.
2. Right to Rectification: Data subjects can request corrections to their personal data if it is inaccurate or
incomplete. This right ensures that individuals can maintain the accuracy of their personal information.
3. Right to Deletion: Also known as the "right to be forgotten," individuals can request the deletion of
their personal data under certain conditions, particularly if it is no longer necessary for the purposes for
which it was collected.
Done by: Tshepo Lekhutlile
SUMMERY
Mauritania's Data Protection Act (Law No. 2017-020) was enacted in 2017 to provide a comprehensive
framework for protecting personal data within the country. This law aligns with Mauritania’s
commitment to privacy standards under the African Union’s Malabo Convention, which focuses on data
protection and cybersecurity across Africa.
Key Provisions of Mauritania's Data Protection Law:
1. Individual Rights: The law gives individuals (data subjects) the right to access, correct, delete, and
restrict the processing of their personal data. It also empowers individuals to object to certain data
processing activities.
2. Consent for Processing: Personal data can only be collected and processed with explicit consent
unless there is a legal or legitimate exception. This ensures that personal data is handled transparently
and for specific purposes.
3. Data Transfers: Cross-border data transfers are regulated, permitting transfers only to countries with
adequate data protection levels or under specific conditions, such as explicit user consent or compelling
public interest.
4. Role of the Data Protection Authority (DPA ): Mauritania’s DPA oversees the enforcement of the law,
manages complaints, and ensures compliance with data protection regulations. The DPA is empowered
to enforce penalties for non-compliance and provides guidance on handling sensitive data categories,
such as health and religious information.
POINT ELABORATION
Under Mauritania's Law No. 2017-020 on data protection, several important individual rights are
granted to data subjects, ensuring their control over personal data. These rights align with global
standards for data protection and privacy. Here are the key rights outlined in the law:
1. Right to Access: Individuals have the right to access their personal data held by organizations. They
can request information about what data is being collected, how it is used, and who it is shared with.
2. Right to Rectification: Data subjects can request corrections to their personal data if it is inaccurate or
incomplete. This right ensures that individuals can maintain the accuracy of their personal information.
3. Right to Deletion: Also known as the "right to be forgotten," individuals can request the deletion of
their personal data under certain conditions, particularly if it is no longer necessary for the purposes for
which it was collected.
Done by: Tshepo Lekhutlile
