§ Dossier · SOUTHERN AFRICA · updated 22 July 2026
11
published decisions tracked
APD: 11
USD 1,617,000
penalties (USD approx.)
median USD 100,000 · mean USD 147,000 · 11 fines
USD 505,000
largest penalty
Crescer Tech - Comércio e Prestação de Serviços, LDA
USD 100,000
median penalty (USD approx.)
across 11 penalties
2026-06
latest decision
data updated 22 July 2026
The law
Lei No. 22/11 de 17 de Junho: Lei da Protecção de Dados Pessoais IN FORCE
2011 · commenced 2011-06-17 · Official full text ↗
- Scope
- Processing of personal data in Angola; modeled on the pre-GDPR Portuguese/EU directive framework.
- Key obligations
- Prior notification and, for sensitive categories, authorisation by the APD; Consent-based lawful processing; Security measures
- DPO required
- Not a general statutory requirement.
- Registration
- Notification/authorisation regime with APD.
- Cross-border transfers
- Transfers outside Angola require APD authorisation and adequacy assessment (MAXAM fined USD 150,000 in 2024 for unlawful UK transfer).
- Breach notification
- Not a general 72-hour regime; obligations per APD practice.
- Penalties
- Administrative fines (2024 practice: USD 75,000-150,000 range) plus criminal liability.
- Authority
- Agência de Protecção de Dados (APD, operational 2019)
Verified 2026-07-06
Access to information
Law No. 11/02 on Access to Administrative Documents 2002 IN FORCE
Enforcement record
Decision types: Penalty notice · 11
Actions by year
Published decisions only; a year with no bar had no published decision that we could find.
Remedy mix
11FineUSD 1,617,000 total
Primary remedy of each tracked decision; totals sum the recorded figures only.Sectors
Sector of the respondent in each tracked decision.
01Filter or search the decisions below
02Click a result to preview its summary
03Open the full record for citation and sources
Related reading
Analysis is at lawlab.africa/analysis;
method, inclusion rules and the correction policy are on the
methodology page.
Track Angola
Get decision alerts by email
Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.