Is a listed company, in Angola

Lei n.º 22/11, de 17 de Junho de 2011, arts. 44-62 (Agência de Protecção de Dados, contravenções e crimes) · Read the law's page

• Expect the Agência de Protecção de Dados, a public legal person with administrative, financial and asset autonomy composed of seven members, to supervise compliance with this law, issue guidance, decide complaints, register and publish processing files, and exercise its sanctioning function.
• Register a code of conduct with the APD before relying on it, and expect the APD to reject a code that conflicts with this law or other applicable legislation.
• Expect any person to be able to pursue an administrative or judicial remedy for a breach of this law's data protection rules, in addition to filing a complaint with the APD, and expect an APD decision to be appealable to the administrative courts.
• Expect to face judicial liability for reparation of moral or patrimonial harm caused to a person by misuse of their personal data, with the amount set by a judge.
• Expect an administrative fine, in national currency equivalent, of USD 75,000 to USD 150,000 for violating the security, professional secrecy, or special category duties in Articles 14, 15, 16, 17, 20, 30, 31 or 32, or of USD 65,000 to USD 130,000 for violating the general principles in Articles 6 to 11 or the consent, communication, or interconnection duties in Articles 18, 19 and 21 to 24, tripled for a company or association.
• Expect criminal liability of three to eighteen months' imprisonment or a corresponding fine, doubled for sensitive category data, for omitting a required APD authorisation request, giving false information in a notification or authorisation request, carrying out an illegal data interconnection, or failing to comply with the APD's own deadline for a required action.
• Do not access personal data whose access is barred to you without authorisation, on pain of six months' to two years' imprisonment or a corresponding fine, aggravated where achieved by defeating security rules or for a benefit.
• Do not erase, destroy, damage, suppress or modify personal data without due authorisation, on pain of eighteen months' to three years' imprisonment or a corresponding fine, aggravated for particularly serious damage.
• Interrupt, cease or block processing once the APD has notified you to do so, and cooperate with an APD request, on pain of up to three years' imprisonment or a corresponding fine for qualified disobedience.
• Keep personal data confidential once bound by professional secrecy, on pain of imprisonment of up to eighteen months, rising to two years for a public official, a financial gain motive, or harm to the data subject's reputation or privacy.
• Expect a court to add, alongside a fine, a temporary or permanent processing ban, an order to block, erase or destroy data, or publication of the conviction at your expense in a widely circulated periodical.