{
  "node_id": "bi-pdp-law-2020",
  "title": "Burundi Law on Personal Data Protection 2020",
  "domain": "Cybersecurity",
  "version": "1.0.0",
  "last_updated": "2026-04-27",
  "bluf": "Burundi enacted the Law on Personal Data Protection in 2020, establishing a comprehensive legal framework for the protection of personal data in the Republic of Burundi. The law is administered by the Agence de Régulation et de Contrôle des Télécommunications (ARCT). It establishes principles for the lawful processing of personal data, requires data controllers to obtain consent from data subjects before collecting personal data, grants data subjects rights of access, rectification, and erasure, mandates security safeguards, and restricts cross-border transfers to jurisdictions with adequate protection. Data controllers must register their processing activities with the ARCT. The law aligns with the African Union Malabo Convention on cyber security and personal data protection.",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0",
    "l402_paywall_url": "https://bidda.com/api/v1/vault/nodes/bi-pdp-law-2020.json"
  },
  "crosswalks": {
    "_available_keys": [
      "gdpr_equivalent",
      "iso_standard",
      "nist_framework",
      "regional_framework"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "dependencies": [
    "iso-27001-2022",
    "iso-27701-privacy-information-management"
  ],
  "primary_citations_count": 5
}