The framework
The Digital Code (Law No. 019/AN/23/9ème L), Book I on personal data protection is on the books in Djibouti without yet being fully enforceable, a gap between enactment and operation that defines the current compliance picture.
For media planning that means an opt-in posture, with consent capture built before campaigns launch.
Key instruments
Digital Code (Law No. 019/AN/23/9ème L), Book I on personal data protection
Djibouti adopted a Digital Code in July 2025 whose first book is a full data protection law, giving private-sector processing one year to comply and the public sector two. The national commission meant to supervise it has not been established.
Marketing and advertising
Consent-first rules in Book I of the Digital Code; private-sector processing had one year to comply and the public sector two. Treat the consent note above as the planning rule; the penalty line below is what mispricing it costs.
Cross-border transfers
The Code sets conditions for transfers abroad, to be supervised by a commission that has not been set up.
Enforcement and penalties
The Code provides for sanctions, but no commission is yet in place to impose them.