Privacy enshrined in Constitution: Yes, Article 22 of the Constitution protects the right to privacy, while Article 32 provides a right of access to information unless it would compromise the privacy of any person.

DPA legislation: South Sudan currently has no data protection legislation.

In 2021, South Sudan enacted the Cybercrimes and Computer Misuse Provisional Order 2021. Section 6 imposes an obligation on service providers to store information relating to communications, including personal data and traffic data of subscribers, for 180 days. The Order has been criticised for having a chilling effect on freedom of expression, media freedom, and access to information, while failing to adequately protect privacy and personal information. The Penal Code of 2008 also includes some provisions relevant to cybercrimes.

It has also been reported that South Sudan has drafted a dedicated data protection bill which is expected to pass into law soon.