The framework
Angola regulates personal data through Law 22/11 on Personal Data Protection, dating from 2011 and supervised by the APD.
For advertisers the consent posture matters most, and Angola sits in the opt-in bloc, where tracking and outreach need permission up front.
Key instruments
Law 22/11 on Personal Data Protection
Angola legislated in 2011 but only activated its authority in 2019; since then the APD has pushed registration and authorization compliance.
Marketing and advertising
Consent-first with authorization duties; APD approval needed for sensitive processing and transfers. Most channel decisions here follow from that consent rule.
Cross-border transfers
Transfers abroad require APD authorization and turn on the adequacy of the destination.
Enforcement and penalties
Fines scale with the company's revenue band. A ceiling means little until the authority uses it, so its docket is the better guide.