03 March 2023
The Angolan Data Protection Agency (APD) has fined Africell Angola US$150,000 for violating the Personal Data Protection Law (LPDP). The telecom operator is accused of having collected the personal data of its subscribers without having obtained the prior authorization of the APD..png?lu=306)
“The electronic communications operator has collected various categories of personal data such as the name of the data subject, telephone number, address, gender, age, interests, credit card or debit, bank data and other payment information, interests and preferences, location data, times of passing and receiving calls, including the identification document,” explained the APD.
According to the texts in force in Angola, failure to comply with the obligation to notify the DPA is punishable by a fine of up to US$450,000. However, Africell benefited from a few mitigating situations, including its clear and immediate intention to comply with the LPDP; lack of history; and not having derived economic benefits from the data collected illegally.
