Status
In force
Consent model
Opt-in
Primary law
Data Protection Act 2023
Year
2023
Authority
Data Protection Authority
Marketing consent
Consent-first framework.
Transfers
Transfers abroad sit under the data protection authority's supervision.
Penalties
The authority can impose administrative fines.
The framework
The operative statute in Somalia is the Data Protection Act 2023, enforced by the Data Protection Authority.
For media planning that means an opt-in posture, with consent capture built before campaigns launch.
Key instruments
Data Protection Act 2023
2023 · In force
Somalia surprised observers by enacting a comprehensive law in March 2023 and standing up an authority; capacity is now the constraint.
Marketing and advertising
Consent-first framework. In practice that means consent before tracking or marketing outreach, documented well enough to show a regulator.
Cross-border transfers
Transfers abroad sit under the data protection authority's supervision.
Enforcement and penalties
The authority can impose administrative fines. How often the authority actually enforces sets the real price.
Cite this page: "Somalia Data Privacy Laws." Digital Privacy Regulations, September 28, 2026, https://digitalprivacyregs.com/somalia.html. Accessed [date].