Namibia

DATA PROTECTION FACTSHEET

SVG by Vzb83~commonswiki et al., Public domain, via Wikimedia Commons

NO DATA PROTECTION LAW

DATA PROTECTION AUTHORITY NOT APPOINTED

Download draft Bill

Fast Facts
Domestic Law

Privacy enshrined in Constitution: Yes, Namibia recognises the right to privacy as a fundamental human right in Article 13 of the Namibian Constitution.

DPA legislation: Despite several high-profile data security incidents in Namibia, no particular policies, frameworks, or strategies deal directly with cybercrime, cybersecurity, or data privacy. In October 2022, the Ministry of Information and Communication Technology (MICT) called for comment on a new Data Protection Bill, 2021.
International Commitments
Scope of Application

Applies to natural persons: No law

Applies to juristic persons: No law

Applies to public entities: No law

Domestic/personal purposes exclusion: No law

National security exclusion: No law

Law enforcement exclusion: No law

Cabinet or Executive Council exclusion: No law

Judicial functions exclusion: No law

Journalistic, literary or artistic purposes exclusion: No law

Temporary copies exclusion: No law

Other exclusion(s): No law

Broad or vague exclusions: No law

Applies to foreign entities: No law

Excludes foreign entities that only transit personal data through the country: No law
Personal Data
Collection and Processing
Transparency

Notification that data is being processed: No law

Notification to DPA in event of data breach: No law

Notification to data subject in event of data breach: No law

Timeframe for notification is specified: No law

Exceptions exist to breach notifications: No law

Requires a data processing register: No law

Register is publicly available: No law

Provides for terms of service icons: No law

DPA must submit at least annual report: No law

DPA report is made public: No law
Accountability

Explicit provision for civil liability: No law

Established/designates a Data Protection Authority: No law

DPA is empowered to investigate: No law

DPA is empowered to subpoena or request evidence: No law

Law provides for criminal penalties: No law

Law provides for administrative penalties: No law

DPA is independently structured (does not exist within or receive instructions from another public body): No law

DPA receives funding directly from the state budget/legislative body: No law

DPA may receive some forms of external funding/own revenue: No law

Adequate protections against undue removal: No law

Number of members in DPA: No law

Maximum term length for members of the DPA (years): No law
Participation

Right of data subject to access a copy of their personal data: No law

Right of data subject to request a correction of data: No law

Right of data subject to request deletion of data: No law

Justification required for a request for deletion: No law

Defines the requirements for consent: No law

DPA is mandated to participate in policy formulation: No law
Cross-border Transfer
Automated Processing

LEARN MORE ABOUT THE METHODOLOGY

Page last updated: 29 November 2022