The African Union ('AU') published, on 28 July 2022, its Data Policy Framework. In particular, the framework examines international, regional, and legislative trends in data protection. Specifically, the framework outlines guiding principles including cooperation, integration, fairness, and inclusiveness, as well as trust, safety, and accountability, among others. In addition, the framework details recommendations such as the creation of data portability rights, including for non-personal data, to make it easier for customers of cloud services to switch between providers, and the development of contractual standards for public organisations, which can be used by small and medium enterprises to protect rights including the rights to access, retrieve, and delete personal and non-personal data that is processed by cloud providers.

Furthermore, the framework examines areas, among others, including cybersecurity, data protection, data ethics, consumer protection, and cross-border transfers. In regard to data localisation, the framework highlights that data localisation requires specificity to facilitate broader flows as far as is conducive with policy imperatives like the Africa Free Trade Area, and for clarity, which can help minimise the costs for local businesses and innovators, and reduce the risks of unintended consequences.

You can read the framework here.