By deliberation 005/2026 dated 14 July, the APD fined Empresa Publica de Aguas - EPAL, E.P. the kwanza equivalent of USD 150,000 for failing to adopt technical and organisational measures sufficiently adequate to protect its clients' personal data, and for failing to notify and obtain the prior authorisation of the APD for the processing of its clients' data. The penalty was extraordinarily attenuated because, among other circumstances, the entity promptly cooperated with the APD in clarifying the facts and had no record of prior infractions.
Orders and outcome
A fine equivalent in kwanza to USD 150,000, extraordinarily attenuated. Dated 14 July 2026.
NOTIFICATION · SECURITY-MEASURES · FINE · PUBLIC-SECTOR
Cite this decision
APD (Angola), Empresa Pública de Águas - EPAL, E.P., Deliberação 005/2026, penalty notice of 14 July 2026. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/angola/apd/2026/epal-security-measures-notification/ (accessed 30 August 2026).