The African Union AI policy framework sets standards for data sovereignty

Business Insider

10-05-2025

The AI strategy of the African Union prioritizes data sovereignty, digital infrastructure, and cross-border regulation, with 22 countries supporting a national structure.
The African Union (AU) officially adopted its continental artificial intelligence (AI) strategy in July 2024
A key focus is the AU's data policy framework and the Malabo Convention, creating comprehensive and uniform data governance across member nations.
By April 2025, 22 member states received technical support for national AI strategy adoption
The African Union in July 2024, formally adopted its continental artificial intelligence (AI) strategy during its 45th ordinary session in Ghana's Accra.
The strategy promotes a growth-first approach to AI, based on five goals: the creation of abilities, reducing risks, attracting investment, promoting cooperation, and ensuring Africa benefits from AI innovation.
Fifteen policy focus areas are outlined, including moral rules to digital infrastructure.
In February 2025, at the AI Action Summit in Paris, AU leaders officially recognized data sovereignty as a fundamental principle. The member states agreed that the data generated within their boundaries should remain under national control.
This means that data usage from across all borders should follow local laws, and sovereignty is also preserved in digital space.
To strengthen this, AU is relying on two major pieces of equipment. The first is the AU data policy framework, which was adopted in 2022, outlining a continental vision for safe data flow, privacy protection, and coordinated governance.
It asks for independent, well-funded data protection officers who have the power to issue violations, ban processing, and coordinate borders.
The second is the Malabo Convention, a legal framework adopted in 2014 and implemented from June 2023. It laid the foundation for harmonizing data protection laws throughout the continent. Member states are encouraged to confirm and implement their rules to continuously preserve the right to privacy.
To support digital trade and AI-operated services, AU implements a digital single market.
Under the AfCFTA Digital Trade Protocol, the border-crossing data flow will be regulated, which will ensure alignment with data sovereignty, promoting AI investment and e-commerce growth.
This vision is an important digital infrastructure, including electricity, broadband, data centers, and computing systems. AU's strategy looks necessary to enable them to enable research, empower startups, and close the digital divide.
By April 2025, 22 member states had received AU technical assistance to develop national AI strategies. Auda - Distributed through NEPAD and other institutions, it helps countries to align with the continental structure.
States are now urged to adopt AU policies in funding projects through national law, public-private partnership, and implement flexible, locally informed rules.
Data sovereignty - The digital power shift
AU's AI is a firm stand on data sovereignty at the center of AI strategy. African nations are claiming complete control over data generated within their borders, ensuring that foreign institutions cannot take advantage of local data without consent.
This change strengthens countries to determine how their data is stored, used, and how privacy, national interests, and economic values are considered.
By anchoring AI development in sovereign data governance, AU is rejecting data dependence and determining clear digital boundaries. It also ensures that the digital resources of Africa first benefit their people, not external corporations or governments.
The 2025 AI agenda of the AU balances national data control with the requirement of regional integration.
The Global AI Summit in Kigali continued in April 2025, where African leaders echoed the AU's call for data sovereignty and harmed digital rule.
With coordinated governance, safe cross-limit flow, and infrastructure investment, Africa is laying the foundation.