COSAL - Comércio e Serviços de Angola, Lda

Fine imposed (usd 75,000 akz-equivalent), extraordinarily mitigated. APD, 19 July 2024.

Record ID: ao-apd-2024-0004
Case reference: Deliberação 004/2024 or 005/2024
Jurisdiction: Angola
Regulator: APD
Type: penalty notice
Date decided: 19 July 2024
Respondent type: private
Sector: retail
Violations: failure to implement security measures, failure to prevent data breach
Provisions cited: Lei 22/11 de 17 de Junho, art. 53(3) Lei 22/11 (publication)
Outcome: fine imposed (USD 75,000 AKZ-equivalent), extraordinarily mitigated
Penalty: USD 75,000 (≈ USD 75,000 at the decision date)
Status: final
Source: Official document ↗
Record verified: 11 July 2026

Summary

The APD fined COSAL USD 75,000 (kwanza equivalent) for failing to implement adequate technical and organisational measures to protect customer and employee data against the ransomware attack of 22 September 2023, which resulted in encryption, unavailability, and unauthorised access and disclosure. The penalty was extraordinarily mitigated. Deliberations 004/2024 and 005/2024 of 19 July 2024.

RANSOMWARE · SECURITY-MEASURES · FINE

Cite this decision

APD (Angola), Deliberação 004/2024 or 005/2024, penalty notice of 19 July 2024. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/angola/apd/2024/cosal-ransomware-security-failure/ (accessed 22 July 2026).

Track Angola enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.