Status
In force
Consent model
Opt-in
Primary law
Data Protection Act 2022
Year
2022
Authority
Eswatini Communications Commission (data protection unit)
Marketing consent
Consent or listed bases, GDPR-influenced.
Transfers
Transfers abroad need an adequate destination or appropriate safeguards such as contractual clauses.
Penalties
The law provides for fines and criminal penalties.
The framework
The operative statute in Eswatini is the Data Protection Act 2022, enforced by the Eswatini Communications Commission.
For media planning that means an opt-in posture, with consent capture built before campaigns launch.
Key instruments
Data Protection Act 2022
2022 · In force
A modern 2022 statute supervised through the communications regulator; obligations are GDPR-familiar.
Marketing and advertising
Consent or listed bases, GDPR-influenced. In practice that means consent before tracking or marketing outreach, documented well enough to show a regulator.
Cross-border transfers
Transfers abroad need an adequate destination or appropriate safeguards such as contractual clauses.
Enforcement and penalties
The law provides for fines and criminal penalties. How often the authority actually enforces sets the real price.
Cite this page: "Eswatini Data Privacy Laws." Digital Privacy Regulations, September 28, 2026, https://digitalprivacyregs.com/eswatini.html. Accessed [date].