Law No. 1/03 of March 10, 2026 on the Protection of Personal Data

Loi n°1/03 du 10 mars 2026 portant protection des données à caractère personnel

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

In force 6 months, effective 10 March 2026.

A comprehensive regime rule binding public and private bodies.

As of 4 September 2026.

What it requires

Treat the collection, processing, or training on personal data of persons in Burundi as governed by Law No. 1/03 of 10 March 2026, a comprehensive data-protection statute whose enacted text is not publicly available; its controller obligations, data-subject rights, and oversight body are described only in the account of the bill.

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

Burundi's comprehensive personal-data statute, adopted unanimously by the National Assembly on 15 January 2026 and promulgated by the President of the Republic on 10 March 2026. The regulator that publishes it, ARCT, confirms only the law's title and promulgation date.

A contemporaneous account of the bill as submitted for the Assembly's analysis that day describes it as organized into eight chapters covering, among other things, the rights of persons regarding the processing of their personal data, the obligations of data controllers, the protection and oversight body the law creates, and the rules applicable to data processors.

The same account states that the bill's sanctions for violations would apply without prejudice to the Penal Code or to Burundi's separate cybercriminality statute; whether the promulgated text retains this structure is unconfirmed.

When LexLint raises it

crawls_web
trains_models
deploys_chatbot
automated_outreach
high_risk_decisions
processes_voice
processes_biometrics
serves_minors

Read the law

Regulator's own listing of the law's title and promulgation date (Agence de Régulation et de Contrôle des Télécommunications, ARCT)
archived the statute's own text was not reachable

archived copy

Read from a public archive copy, not the publisher directly. The publisher does not serve this page to automated readers, so a direct fetch was not an option here; how we access sources. Archived May 12, 2026. Publisher's page: https://arct.gov.bi/2026/03/18/loi-n1-03-du-10-mars-2026-portant-protection-des-donnees-a-caractere-personnel/

Back to the example · Lint your app