Banco de Desenvolvimento de Angola (BDA)

Fine imposed (usd 75,000 akz-equivalent). APD, 30 April 2025.

Record ID: ao-apd-2025-0001
Jurisdiction: Angola
Regulator: APD
Type: penalty notice
Date decided: 30 April 2025
Respondent type: public
Sector: banking
Violations: failure to implement security measures, failure to prevent data breach
Provisions cited: Lei 22/11 de 17 de Junho
Outcome: fine imposed (USD 75,000 AKZ-equivalent)
Penalty: USD 75,000 (≈ USD 75,000 at the decision date)
Status: final
Source: Official document ↗
Record verified: 11 July 2026

Summary

The APD fined the state development bank BDA USD 75,000 (kwanza equivalent) for failing to implement adequate technical, organisational and security measures to protect employee personal data against the ransomware attack of 10 February 2023. Decided at the Board's first extraordinary session of 30 April 2025.

RANSOMWARE · PUBLIC-BODY · BANKING · FINE

Cite this decision

APD (Angola), Banco de Desenvolvimento de Angola (BDA), penalty notice of 30 April 2025. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/angola/apd/2025/bda-ransomware-security-failure/ (accessed 22 July 2026).

Track Angola enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.