§ Dossier · SOUTHERN AFRICA · updated 23 October 2026
13
published decisions tracked
APD: 13
USD 1,842,000
penalties (USD approx.)
median USD 100,000 · mean USD 141,692 · 13 fines
USD 505,000
largest penalty
Crescer Tech - Comércio e Prestação de Serviços, LDA
USD 100,000
median penalty (USD approx.)
across 13 penalties
2026-07
latest decision
data updated 23 October 2026
The law
Lei No. 22/11 de 17 de Junho: Lei da Protecção de Dados Pessoais IN FORCE
2011 · commenced 2011-06-17 · Official full text ↗
Scope Processing of personal data in Angola; modeled on the pre-GDPR Portuguese/EU directive framework. Key obligations Prior notification and, for sensitive categories, authorisation by the APD; Consent-based lawful processing; Security measures DPO required Not a general statutory requirement. Registration Notification/authorisation regime with APD. Cross-border transfers Transfers outside Angola require APD authorisation and adequacy assessment (MAXAM fined USD 150,000 in 2024 for unlawful UK transfer). Breach notification Not a general 72-hour regime; obligations per APD practice. Penalties Administrative fines (2024 practice: USD 75,000-150,000 range) plus criminal liability. Authority Agência de Protecção de Dados (APD, operational 2019) Verified 2026-07-06
Access to information
Law No. 11/02 on Access to Administrative Documents 2002 IN FORCE
Enforcement record
Decision types: Penalty notice · 13
Actions by year 2023: 1 1 2023 2024: 5 5 2024 2025: 3 3 2025 2026: 4 4 2026 Published decisions only; a year with no bar had no published decision that we could find.
Remedy mix 13 Fine USD 1,842,000 total
Primary remedy of each tracked decision; totals sum the recorded figures only. Sectors technology: 2 aviation: 2 banking: 2 telecoms: 2 public services: 1 general: 1 retail: 1 energy: 1 industrial: 1 technology · 2 aviation · 2 banking · 2 telecoms · 2 public services · 1 general · 1 retail · 1 energy · 1 industrial · 1 Sector of the respondent in each tracked decision. 01 Filter or search the decisions below
02 Click a result to preview its summary
03 Open the full record for citation and sources
Search
ViolationAll failure to implement security measures failure to notify regulator failure to prevent data breach inadequate technical and organisational measures processing without prior authorisation unauthorised data access unlawful cross-border data transfer
YearAll 2026 2025 2024 2023
OutcomeAll fine imposed (USD 100,000 AKZ-equivalent) fine imposed (USD 112,000 AKZ-equivalent), extraordinarily mitigated fine imposed (USD 150,000 AKZ-equivalent) fine imposed (USD 225,000 AKZ-equivalent) fine imposed (USD 505,000 AKZ-equivalent) - largest published APD fine to date fine imposed (USD 75,000 AKZ-equivalent) fine imposed (USD 75,000 AKZ-equivalent), extraordinarily mitigated
Reset
Related reading
Analysis is at lawlab.africa/analysis ;
method, inclusion rules and the correction policy are on the
methodology page .
Track Angola
Free: a monthly digest of new verified decisions in your chosen jurisdictions. You confirm by email before anything is sent; every alert has an unsubscribe link. Privacy · Terms .