It’s incredible how fast data protection laws spread in the whole world. The most impressive part is how much they look alike… Recently, Angola passed a personal data protection law. It’s main characteristics are:
- The law establishes a Data Protection Agency and sets forth data processing principles, including transparency, lawfulness, proportionality, purpose, accuracy and length of retention period.
- The Data Protection Agency must approve international data transfers to countries that do not ensure an adequate level of protection, and data controllers must notify the Agency of personal data transfers to adequate countries.
- Processing personal data is permitted only with (1) the express consent of the data subject, and (2) notification to the Data Protection Agency. Additional restrictions apply to the processing of sensitive data (which includes genetic data), credit and solvency data, video surveillance data and phone call recordings.
- Data subjects may restrict the use of their personal data for certain postal mail and electronic advertising purposes.
- Data subjects have the right to access, object to, rectify, update and delete their personal data.