Privacy enshrined in Constitution: Yes, Articles 28 and 42 protect the right to privacy.

DPA legislation: In January 2026 it was reported that Burundi’s National Assembly and Senate had adopted a data protection law. As of 28 January 2026 it appeared to be awaiting enactment by the President. 

Burundi has been a party to meetings of the East African Community (EAC) to consider the status of cyber laws and highlight areas for reform. A few sectoral laws and regulations contain data protection provisions or impose confidentiality obligations on specific types of personal information. Employment, banking, telecommunications, and healthcare are among the sectors covered.