Empresa Nacional de Distribuição de Electricidade (ENDE-EP)

Fine imposed (usd 225,000 akz-equivalent). APD, 19 July 2024.

Record ID: ao-apd-2024-0005
Case reference: Deliberação 004/2024 or 005/2024
Jurisdiction: Angola
Regulator: APD
Type: penalty notice
Date decided: 19 July 2024
Respondent type: public
Sector: energy
Violations: failure to implement security measures, failure to prevent data breach
Provisions cited: Lei 22/11 de 17 de Junho
Outcome: fine imposed (USD 225,000 AKZ-equivalent)
Penalty: USD 225,000 (≈ USD 225,000 at the decision date)
Status: final
Source: Official document ↗
Record verified: 11 July 2026

Summary

The APD fined the state electricity distributor ENDE-EP USD 225,000 (kwanza equivalent) for failing to implement adequate technical, organisational and security measures to protect customer and employee personal data against the ransomware attack of 18 September 2023. At the time, the largest publicly announced APD fine after Meta-scale outliers elsewhere; deliberations 004/2024-005/2024 of 19 July 2024.

RANSOMWARE · PUBLIC-BODY · SECURITY-MEASURES · FINE

Cite this decision

APD (Angola), Deliberação 004/2024 or 005/2024, penalty notice of 19 July 2024. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/angola/apd/2024/ende-ransomware-security-failure/ (accessed 22 July 2026).

Track Angola enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.