世界银行-非洲数字数据监管（英）.pdf

GOVERNANCEANDTHEDIGITALECONOMYINAFRICATECHNICALBACKGROUNDPAPERSERIESRegulatingDigitalDatainAfricaPublicDisclosureAuthorizedPublicDisclosureAuthorizedPublicDisclosureAuthorizedPublicDisclosureAuthorizedGOVERNANCEANDTHEDIGITALECONOMYINAFRICATECHNICALBACKGROUNDPAPERSERIESRegulatingDataProtectionandCybersecurityinAfrica:FindingsfromtheGlobalDataRegulationDiagnosticTechnicalBackgroundPaper:RegulatingDataProtectionandCybersecurityinAfricaFindingsfromtheGlobalDataRegulationDiagnosticiiiCopyright©2023TheWorldBank1818HStreetNWWashingtonDC20433Telephone:202-473-1000Internet:www.worldbank.orgDisclaimerThisworkisaproductofthestaffofTheWorldBank.Thefindings,interpretations,andconclusionsexpressedinthisworkdonotnecessarilyreflecttheviewsofTheWorldBank,itsBoardofExecutiveDirectors,orthegovernmentstheyrepresent.RightsandPermissionsThematerialinthisworkissubjecttocopyright.Anyqueriesonrightsandlicenses,includingsubsidiaryrights,shouldbeaddressedtoWorldBankPublications,TheWorldBankGroup,1818HStreetNW,Washington,DC20433,USA;fax:202-522-2625;e-mail:pubrights@worldbank.org.TechnicalBackgroundPaper:RegulatingDataProtectionandCybersecurityinAfricaFindingsfromtheGlobalDataRegulationDiagnosticivAcknowledgementsThisBackgroundNotewaspreparedbyRongChen(Economist,DigitalDevelopment),LillyanaDazaJaller(consultant),andTaniaBegazo(SeniorEconomist)withcontributionsfromAnaRuival(consultant,DigitalDevelopment).TheBackgroundNotebenefitedimmenselyfromtheparticipation,assistance,andinsightsfromotherexperts.TheteamisespeciallygratefulforreferencesoncybersecurityassessmentsinAfricaprovidedbyAnatLewin,SeniorDigitalSpecialist,thepeerreviewersDavidSatola,LeadCounsel,Technology&Innovation,LegalandAnatLewin,andthepriorworkconductedfortheWorldDevelopmentReport2021‘DataforBetterLives’thatallowedforthedevelopmentofthesurveyusedtocomparethestatusofdataregulationacrosscountriesinAfrica.TechnicalBackgroundPaper:RegulatingDataProtectionandCybersecurityinAfricaFindingsfromtheGlobalDataRegulationDiagnosticvCommonAbbreviationsandDefinedTermsThissectionexplainsthecommontermsandabbreviationsusedinthispaper.Abbreviation/TermFullTerminology/DefinitionARPAdministrativeRedressPanelATIAccesstoInformationCERTsComputerEmergencyResponseTeamsCNDPMorocco’sDataProtectionNationalCommissionCSIRTsComputerSecurityIncidentResponseTeamsCSSSIMorocco’sCommitteeforInformationSystemsSecurityDGSSIMorocco’sDirectorateGeneralforInformationSystemsSecurity(,DPCKenya’sDataProtectionCommissionerECCASEconomicCommunityofCentralAfricanStatesFRANDFair,reasonableandnon-discriminatorytermsGCIGlobalCybersecurityIndexIPRIntellectualpropertyrightmaCERTMoroccanComputerEmergencyResponseTeamNCSNationalcybersecuritystrategyNINNationalIdentificationNumberTechnicalBackgroundPaper:RegulatingDataProtectionandCybersecurityinAfricaFindingsfromtheGlobalDataRegulationDiagnosticviTableofContents1ImportanceofDataRegulation...12Personaldataprotection22.1ObservationsoftheregulatorylandscapeonpersonaldataprotectioninAfrica....32.2Regionalcollaborationonpe