Cybersecurity law & regulation in Angola (2026)
Cybersecurity in Angola: sectoral rules.
Angola's cybersecurity regime currently rests on sector-specific statutes, Law 7/17 on computer and network security, Law 22/11 on personal data protection (with breach-notification duties), and Law 23/11 on electronic communications, rather than a single comprehensive framework. A dedicated Cybersecurity Bill passed its first parliamentary reading on 23 January 2026 and, if enacted, would create a unified National Cybersecurity System anchored by a new National Cybersecurity Centre (CNC) with regulatory, supervisory, and sanctioning powers. In parallel, Presidential Decrees 256/25 and 258/25 (December 2025) formalised a National Cybersecurity Strategy and a National Cybersecurity Council, marking a clear policy shift toward a coherent national regime.
Legal framework
Law No. 7/17 of 16 February 2017 (Computer Security); Law No. 22/11 of 17 June 2011 (Personal Data Protection / LPDP); Law No. 23/11 of 20 June 2011 (Electronic Communications); supervised by Agência de Protecção de Dados (APD) and INACOM; National Cybersecurity Strategy enacted by Presidential Decree No. 256/25 (December 2025); standalone Cybersecurity Bill in parliamentary process since January 2026
Key points: cybersecurity in Angola
Computer security law
Data protection & breach notification
Law No. 22/11 of 17 June 2011 (LPDP), enforced by the Agência de Protecção de Dados (APD), requires data controllers to notify the APD of personal data breaches. A revised draft data-protection law underwent public consultation from March-April 2025 and awaits enactment.
Critical infrastructure incident reporting
Operators of critical information infrastructure are obliged under existing law to report cyber incidents to the Cybersecurity Incident Alert and Response Center (CARIC). A National Cybersecurity Incident Management Framework introduced by the Ministry of Telecommunications in 2024 formalises coordination among Angola-CSIRT, APD, INACOM, and the CRO.
Comprehensive Cybersecurity Bill (in progress)
On 23 January 2026 the Angolan parliament approved a standalone Cybersecurity Bill in its first reading (105 in favour, 1 against, 75 abstentions). The bill would create a National Cybersecurity Centre (CNC) as the central regulatory and sanctioning authority overseeing the entire national cybersecurity system; further readings are required before final enactment.
National Cybersecurity Strategy & Council (Dec 2025)
Presidential Decree No. 256/25 approved Angola's National Cybersecurity Strategy and Presidential Decree No. 258/25 of 3 December 2025 established the National Cybersecurity Council and its Regulation, providing a strategic coordination framework in advance of the pending comprehensive legislation.
Angola-CSIRT
The Angola Computer Security Incident Response Team (Angola-CSIRT) was informally launched in late 2023 to coordinate national cyber-incident responses, intelligence sharing, and public advisories alongside INACOM and the APD, providing an operational incident-response capability ahead of formal legislative backing.
Timeline of decisions
- LawNational Assembly Approves Cybersecurity Bill (First Reading)
Angola's parliament passed the draft Cybersecurity Law with 105 votes in favour (MPLA, PHA, FNLA), 1 against, and 75 abstentions (UNITA, PRS). The law creates a National Cybersecurity System, a National Cybersecurity Council, and a National Cybersecurity Centre (CNC) with coordination, supervisory, inspection and sanctions powers.
AMAN / Lusa
- GuidanceAngola Adopts National Cybersecurity Strategy
The government unveiled a comprehensive National Cybersecurity Strategy aimed at strengthening digital resilience across critical infrastructure and public services. The strategy provides the policy backbone for the pending Cybersecurity Law and Angola-CSIRT capacity building.
TechAfrica News
- Decision · officialPresidential Decree 258/25: National Cybersecurity Council Established; National Cybersecurity Strategy 2024-2028 Adopted
President João Lourenço signed Decreto Presidencial 258/25 creating the National Cybersecurity Council and approved the National Cybersecurity Strategy 2024-2028, published in the Official Gazette Series I No. 227, establishing Angola's first comprehensive, multi-year cybersecurity roadmap.
INACOM
- Decision · officialCouncil of Ministers Approves Draft Cybersecurity Law for Submission to Parliament
The Angolan Council of Ministers formally reviewed and approved the Cybersecurity Bill, clearing it for submission to the National Assembly and signalling a shift from Angola's fragmented sectoral approach to a unified national cybersecurity governance model.
INACOM
- LawMINTTICS Launches Consultation on Cybersecurity Law, National Strategy and Fake-News Law Package
Angola's Ministry of Telecommunications opened public consultation (closing 30 April 2025) on three complementary bills: a Cybersecurity Law, a Presidential Decree adopting a National Cybersecurity Strategy, and a Law on the Dissemination of False Information on the Internet, collectively reshaping Angola's digital governance landscape.
Further Africa
- Law · officialLaws 38/20 and 39/20: New Penal Code and Criminal Procedure Code with Full Cybercrime Chapter
Lei 38/20 (Penal Code) introduced substantive cybercrime offences, illicit access, data manipulation, system sabotage, digital fraud, and illicit interception, aligned with all Budapest Convention articles; Lei 39/20 (Criminal Procedure Code) added expedited data-preservation and lawful-interception procedures, completing Angola's cybercrime legal framework.
Council of Europe Octopus
- Law · officialAngola Ratifies the AU Malabo Convention on Cyber Security and Personal Data Protection
Angola deposited its instrument of ratification for the African Union Convention on Cyber Security and Personal Data Protection (Malabo Convention, 2014), committing to harmonised continental standards on electronic transactions, personal data protection, cybercrime, and cybersecurity governance.
African Union
- Law · officialAngola Ratifies AU Malabo Convention on Cyber Security and Personal Data Protection
Following Resolution 33/2019, Angola became a party to the African Union Convention on Cyber Security and Personal Data Protection (Malabo Convention), committing to harmonised regional rules on cybercrime, electronic transactions, and personal data. The Convention entered into force for Angola in 2020.
Council of Europe Octopus Cybercrime Community
- Law · officialAngola Enacts Cybersecurity Law: Protection of Information Networks and Systems (Lei 7/17)
Lei 7/17 established Angola's baseline cybersecurity obligations, requiring integrity, confidentiality, and availability safeguards for digital infrastructure and mandating a national incident-response team, creating the security floor that any AI-dependent system operating in Angola must meet.
MINTTICS Angola (official ministry portal)
Sources
- lex.ao/docs/assembleia-nacional/2017/lei-n-o-7-17-de-16-de-fevereiro/
- apd.ao/ao/legislacao/
- apd.ao/fotos/frontend_1/editor2/110617_lei_22-11_de_17_junho-proteccao_dados
- aman-alliance.org/Home/ContentDetail/99681
- techafricanews.com/2025/12/09/angola-unveils-national-cybersecurity-strategy-to-strength
- cms.law/en/int/expert-guides/cms-expert-guide-to-data-protection-and-cyber-se
- dlapiperdataprotection.com/index.html?t=breach-notification&c=AO
- horizonengage.com/insights/angola-cybersecurity-bill-raising-compliance-risk-for-critic
- generisonline.com/an-overview-of-cybersecurity-regulations-in-angola/
- ncsi.ega.ee/country/ao/
- angolex.com/paginas/projecto-lei/proposta-de-lei-de-proteccao-de-dados-pessoais-v
- aman-alliance.org/Home/ContentDetail/96459
Next for Angola: Starting a BusinessModerate
Next topicOrientation, not legal advice: verify against the primary sources linked above. Last verified 24 May 2026. Methodology & how to cite · State of Technology Regulation 2026