The APD's announcement of 10 September 2025 records that at the first extraordinary council session held on 30 April of that year, Banco de Desenvolvimento de Angola (BDA) was fined the kwanza equivalent of USD 75,000 for failing to implement adequate technical, organisational and security measures to protect its collaborators' personal data against a ransomware attack that occurred on 10 February 2023. The penalty was extraordinarily attenuated given the bank's prompt cooperation with the APD and absence of prior infractions.
Orders and outcome
A fine equivalent in kwanza to USD 75,000, extraordinarily attenuated.
RANSOMWARE · PUBLIC-BODY · BANKING · FINE
Cite this decision
APD (Angola), Banco de Desenvolvimento de Angola (BDA), penalty notice of 30 April 2025. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/angola/apd/2025/bda-ransomware-security-failure/ (accessed 30 August 2026).