Somalia is at a pivotal moment in its digital transformation journey. As the country rebuilds its institutions and embraces digital technologies, the need for robust data protection and digital governance frameworks has become increasingly urgent. The operationalisation of Somalia’s Data Protection Authority in late 2025 marked a significant milestone in this journey—but it is only the beginning.
This policy brief examines Somalia’s data protection landscape, the progress made in operationalising the Data Protection Authority, and the emerging challenges in digital governance that require urgent attention from policymakers, regulators, and development partners.
The Data Protection Landscape in Somalia
Somalia’s Data Protection Law, enacted in 2024, established the legal foundation for data protection in the country. The law created the Somalia Data Protection Authority (SDPA) as the independent regulatory body responsible for enforcing data protection standards, registering data controllers and processors, and promoting awareness of data protection rights among citizens and organisations.
Since its establishment, the SDPA has taken significant steps toward becoming a functioning regulatory authority, including:
- Institutional setup and governance frameworks — Establishing internal structures, procedures, and governance mechanisms to enable effective regulation.
- Staff capacity building — Developing the technical and regulatory expertise required to enforce data protection standards and engage with regulated entities.
- Regulatory instruments — Drafting subsidiary legislation, guidance notes, and compliance frameworks to operationalise the Data Protection Law.
- Communication and awareness — Developing communication strategies to raise public awareness of data protection rights and obligations.
Conclusion
Somalia has made significant progress in establishing a legal and institutional framework for data protection. The operationalisation of the Data Protection Authority is a critical step toward safeguarding citizens’ rights and building trust in digital systems. However, the journey is far from complete.
Sustained investment in institutional capacity, public awareness, regional harmonisation, and digital infrastructure will be essential to ensure that Somalia’s data protection framework delivers real protections for its citizens while enabling the digital economy to flourish.
Horn Associates remains committed to supporting Somalia’s institutions in this journey—drawing on our experience in institutional development, regulatory reform, and policy advisory to help build resilient, effective, and trustworthy digital governance systems.
About the Authors
This policy brief was prepared by the Horn Associates team, drawing on our work supporting the operationalisation of Somalia’s Data Protection Authority and our broader experience in governance reform and institutional development in the Horn of Africa.
For more information, contact us at info@hornassociates.com.
