Empresa Nacional de Distribuição de Electricidade (ENDE-EP)

Fine imposed (USD 225,000 AKZ-equivalent). APD, 19 July 2024.

Record ID: ao-apd-2024-0005
Case reference: Deliberação 004/2024 or 005/2024
Jurisdiction: Angola
Regulator: APD
Type: penalty notice
Date decided: 19 July 2024
Respondent type: public
Sector: energy
Violations: failure to implement security measures, failure to prevent data breach
Provisions cited: Lei 22/11 de 17 de Junho
Outcome: fine imposed (USD 225,000 AKZ-equivalent)
Penalty: USD 225,000 (≈ USD 225,000 at the decision date)
Status: final
Source: Official document ↗
Source integrity: SHA-256 8e04f6d339d506f2…
Record verified: 30 July 2026

The facts

By deliberation 005/2024 of 19 July, the APD fined Empresa Nacional de Distribuicao de Electricidade, ENDE-EP the kwanza equivalent of USD 225,000 for failing to implement adequate technical, organisational and security measures to protect the personal data of its clients and collaborators against a ransomware attack on 18 September 2023, which resulted in encryption, unavailability and unauthorised access to the data.

Orders and outcome

A fine equivalent in kwanza to USD 225,000. Dated 19 July 2024.

RANSOMWARE · PUBLIC-BODY · SECURITY-MEASURES · FINE

Cite this decision

APD (Angola), Empresa Nacional de Distribuição de Electricidade (ENDE-EP), Deliberação 004/2024 or 005/2024, penalty notice of 19 July 2024. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/angola/apd/2024/ende-ransomware-security-failure/ (accessed 23 October 2026).

Track Angola enforcement

Free: a monthly digest of new verified decisions in your chosen jurisdictions. You confirm by email before anything is sent; every alert has an unsubscribe link. Privacy · Terms.