By deliberation 004/2024 of 19 July, the APD fined COSAL - Comercio e Servicos de Angola, Lda the kwanza equivalent of USD 75,000 for failing to implement adequate technical and organisational measures to protect the personal data of its clients and workers against a ransomware attack on 22 September 2023, which resulted in encryption, unavailability, and unauthorised access to and disclosure of that data. The penalty was extraordinarily attenuated in view of the number and significance of the mitigating circumstances.
Orders and outcome
A fine equivalent in kwanza to USD 75,000, extraordinarily attenuated. Dated 19 July 2024.
RANSOMWARE · SECURITY-MEASURES · FINE
Cite this decision
APD (Angola), COSAL - Comércio e Serviços de Angola, Lda, Deliberação 004/2024 or 005/2024, penalty notice of 19 July 2024. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/angola/apd/2024/cosal-ransomware-security-failure/ (accessed 30 August 2026).