LAW LAB AFRICA
CONNECTING
LAW LAB AFRICA
LAW LAB AFRICA
Subscribe to Newsletter

LAW LAB
AFRICA

Specialized Tech Compliance Consulting in Cybersecurity, Data Protection, AI Governance, Digital Assets, and Intellectual Property for companies operating across Africa and the Globe.

§ 01What we do

Tech Law Advisory & Research.

01 · DATA PROTECTION COMPLIANCE100+ frameworks

Gap assessments, DPIAs and ongoing compliance across every major data protection framework.

From gap analysis to DPIA, breach response to ongoing advisory, across African law and every global framework that touches your operations.

🇪🇺 GDPR🇳🇬 NDPA🇿🇦 POPIA🇰🇪 DPA · KE🇺🇸 CCPA🇮🇳 DPDP🇨🇳 PIPL🇧🇷 LGPD🇸🇬 PDPA · SG🇪🇬 PDPL · EG🇬🇭 DPA · GH🇷🇼 DPA · RW+ 88 more
100+Frameworks
54African JX
3Continents
02 · AI GOVERNANCE & COMPLIANCE

AI governance and compliance advisory across global and emerging frameworks.

AI deployment creates new legal exposure at every layer of the stack. We advise on risk classification, conformity assessments, transparency obligations, and governance structures across the EU AI Act, US federal orders, and Africa's emerging frameworks.

JXFrameworkStatus
🇪🇺EU AI ActIN FORCE
🇺🇸EO on AI (Federal)IN FORCE
🇰🇪Draft AI PolicyDRAFTING
🇳🇬NITDA AI FrameworkCONSULT
🇿🇦DSAC AI PolicyPROPOSED
03 · BLOCKCHAIN & CRYPTO POLICY

VASP licensing, AML compliance and token classification across African and global crypto frameworks.

Exchanges, DeFi protocols, and token issuers face a rapidly closing regulatory window. We advise on VASP registration, AML/CFT compliance, and licensing across the markets where you operate.

JXFrameworkStatus
🇰🇪VASP Act 2025IN FORCE
🇳🇬SEC Digital Assets RulesIN FORCE
🇬🇭VASP Act 2025IN FORCE
🇿🇦FSCA CASP RulesIN FORCE
04 · CYBERSECURITY COMPLIANCE

Breach notification, incident response and critical infrastructure obligations across African and international frameworks.

Cybersecurity law in Africa is fragmented and moving fast. We map your specific obligations: breach notification timelines, incident response requirements, sector rules, and critical information infrastructure classifications.

  • Kenya Computer Misuse & Cybercrimes Act
  • Nigeria Cybercrime (Prohibition) Act
  • South Africa Cybercrimes Act 2021
  • Critical information infrastructure (CII) compliance
05 · INTELLECTUAL PROPERTY

Technology IP strategy for companies building, acquiring or licensing technology.

Building technology means building IP. We advise on software copyright, algorithm and code protection, data ownership and licensing, trade secret strategy, and IP due diligence for M&A across African and global jurisdictions.

SOFTWARE
Algorithm and code IP
DATA
Ownership & licensing
TRADE SECRET
Strategy & protection
M&A
IP due diligence
06 · TECHNOLOGY POLICY RESEARCHMONITORING

Policy Research & Government Advisory.

We produce research, respond to consultations, and brief governments, regulators, and multilateral institutions on technology law, data governance, and digital policy across Africa and beyond.

54
AFRICAN JURISDICTIONS MAPPED
595
ENFORCEMENT DECISIONS TRACKED
3
COVERAGE TIERS
Daily
MONITORING PIPELINE
07 · IN-HOUSE TRAINING

Bespoke training programmes for your legal and compliance team.

In-person or remote. Structured around your operating footprint, not generic slides. Africa-specific cases and practical frameworks your team can use from day one.

Data protectionAI governanceCrypto regulationCybersecurity lawTech policyIP strategy
§ 02Resources & products
course · tracker · digest · reports

Practical tools for compliance professionals operating across African markets.

01 · DATA PROTECTION COURSE
FOUNDING COHORT IN SESSIONNEXT COHORT · JOIN THE LIST

Africa Data Protection Compliance: A Practitioner's Guide.

The first practitioner-grade course built for Africa's regulatory reality. Lawful basis, data subject rights, cross-border transfers, breach notification, DPIAs, enforcement trends. Real African cases, not theoretical frameworks.

18
MODULES
9
JX
CPD
PENDING
ACCESS
Kenya Edition
FOUNDING COHORT IN SESSION · NEXT COHORT OPENING
Join the next cohort
18 MODULES
02 · ENFORCEMENT TRACKERLIVE

Every enforcement decision. On one platform.

Enforcement actions, determinations, and penalties across 10 African jurisdictions. Structured and searchable. 595 records across 10 jurisdictions, each traced to a source document.

DateJXRespondentOutcome
2026.04.18NGMeta Platforms Inc.$220M
2026.03.21KEWorldcoin / TFHPROHIBITED
2026.02.27UGGoogle LLCORDER
2026.02.14ZAExperian South AfricaR 5M
595Decisions
10Jurisdictions
$275M+Penalties recorded
Open the Tracker
03 · DATA PROTECTION DIGESTBI-WEEKLY · FREE

African data protection, reported from the primary sources.

Bi-weekly coverage of enforcement decisions, new legislation, regulatory guidance and key developments across African jurisdictions and beyond. Written for lawyers and compliance professionals.

FROM THE ARCHIVE · KENYA
High Court upholds ODPC action against Worldcoin's iris-scanning scheme.
FROM THE ARCHIVE · GHANA
Ghana's DPC declares 2026 the year full-scale enforcement begins.
FROM THE ARCHIVE · NIGERIA
The GAID takes effect: Nigeria's operating manual for the NDPA.
04 · RESEARCH REPORTSLIVE

In-depth reports on what African data protection regulators actually do.

Long-form analysis built directly on the enforcement dataset. Every figure traces to a decision record. Published on the Research Wing with source citations throughout.

REPORT 01
The ODPC Record: three years of Kenyan data protection enforcement.
REPORT 02
Enforcement in the Dark: what Africa's regulators do not publish.
REPORT 03
The Cross-Border Transfer Rulebook: transfer rules across 54 jurisdictions.
FLAGSHIP
The State of African Data Protection Enforcement: H1 2026.
05 · BESPOKE COMPLIANCE TOOLSBUILT TO ORDER

Compliance tooling built around your organisation.

We design and build compliance tools around your organisation's jurisdictions, obligations and workflows, so your team can track compliance, meet statutory deadlines and produce evidence when a regulator asks for it. In 2026 we built and handed over a nine-jurisdiction compliance workspace for a pan-African organisation; every statutory citation in it was audited against the primary texts before handover. You own what we build.

  • Obligation registers mapped to the statutes in force where you operate, with deadlines and alerts.
  • Guided assessments and registers: DPIAs, breach, vendor, consent and data-subject-request registers your team keeps current.
  • Regulator notification letters generated per jurisdiction, from the facts your registers already hold.
  • Append-only audit trail, designed to survive staff turnover and stand up to scrutiny.
§ 03Founders Compliance Series
first session free · 2 hours · your community picks the topic

Compliance training for African tech founders.

The Founders Compliance Series is a free two-hour training programme delivered at tech hubs, incubators, and accelerators across the continent. Each session covers a focused compliance topic, grounded in real enforcement trends and current African legislation. Your community picks the module. We deliver it.

Every session draws directly from the Africa DP Enforcement Tracker, our live database of 595 enforcement decisions across 10 African jurisdictions.

View the Programme Request a Session
Cost
One Session Free
To your community
Duration
2 hr
90 min + 30 min Q&A
Format
Live
In-person or remote
Experience
7 yr
Advising African tech
Six topic modules available
01Data Protection Fundamentals
02Privacy-by-Design Products
03Cross-Border Data Rules
04Breach Response
05AI Products & African Frameworks
06Fintech, Crypto and Data
§ 04Contact Us
free 30-minute consultation available

Get in touch.

For guidance on data protection, AI governance, blockchain governance, IP, cybersecurity or technology policy across African and global jurisdictions.

BOOK
HOURSMonday to Friday · 08:00 to 18:00 EAT
Name *
Email *
Organisation
Area of enquiry *
Message *