{
  "node_id": "et-pdp-proclamation-2022",
  "title": "Ethiopia Personal Data Protection Proclamation No. 1321/2024",
  "domain": "Cybersecurity",
  "version": "1.1.0",
  "last_updated": "2026-06-29",
  "bluf": "Ethiopia enacted the Personal Data Protection Proclamation No. 1321/2024 (passed 4 April 2024 and gazetted in the Negarit Gazeta on 24 July 2024), establishing the first comprehensive data protection framework in the country. The supervisory and enforcement authority under the Proclamation is the Ethiopian Communications Authority (ECA), established under the Communications Service Proclamation No. 1148/2019. The Proclamation grants data subjects rights of access, rectification, erasure, and objection to processing. Controllers must identify a lawful basis for processing (consent, contract, legal obligation, vital interests, or legitimate interests), implement security safeguards, and restrict cross-border transfers to jurisdictions with adequate protection or with appropriate safeguards. Sensitive categories of personal data require explicit consent. Breach notification obligations apply where a breach is likely to result in high risk.",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0",
    "l402_paywall_url": "https://bidda.com/api/v1/vault/nodes/et-pdp-proclamation-2022.json"
  },
  "crosswalks": {
    "_available_keys": [
      "gdpr_equivalent",
      "iso_standard",
      "nist_framework",
      "regional_framework"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "dependencies": [
    "iso-27001-2022",
    "iso-27701-privacy-information-management"
  ],
  "primary_citations_count": 5
}