Practice area 04
Data protection and policy development
Safeguarding personal data under Somali law and international standards.
Data protection and privacy compliance are emerging concerns in Somalia's digital landscape. We advise clients on safeguarding personal data and complying with national data protection law and international standards.
We also help organisations develop internal and external policies aligned with Somali law and global norms, so that a policy is something the organisation can actually operate rather than a document filed away.
Instructing the firm on this
Bring the documents you already hold. The first meeting produces a written note of the position and the options, not an immediate filing.
What we do
- Policy drafting and review: internal and external data protection policies aligned with Somali legislation and international frameworks, including the GDPR
- Regulatory compliance advisory on the collection, processing, storage and transfer of personal data
- Cross-border data transfer: legal opinions and compliance strategies, including Standard Contractual Clauses and Binding Corporate Rules
- Data sharing agreements defining scope, responsibilities, security measures and dispute resolution
- Advice on extraterritorial data protection requirements affecting Somali operations
Who we act for
- Telecommunications and technology companies
- Financial institutions and mobile money operators
- NGOs and development partners handling beneficiary data
- Employers processing staff records
Legal framework
The rules this work is measured against.
Somali law is being rebuilt in several of these areas at once. We tell clients where the current requirement ends and where a proposed reform begins.
- Domestic
- National data protection law and policy
- International
- GDPR and other applicable standards
- Transfers
- Standard Contractual Clauses, Binding Corporate Rules
- Documents
- Policies, processing guidance, data sharing agreements