Page 21 Each Member State of the African Union shall put in place a legal framework with a view to establishing a mechanism to combat breaches of private life likely to arise from the gathering, processing, transmission, storage and use of personal data. The mechanism so established shall ensure that any data processing, in whatsoever form, respects the freedoms and fundamental rights of physical persons while recognizing the prerogatives of the State, the rights of local communities and the interest of enterprises. Chapter II: Scope of application of the Convention Article II – 3: The following actions shall be subject to this Convention: 1) Any gathering, processing, transmission, storage and use of personal data by a physical person or the State, local communities and public or private law corporate bodies; 2) Any processing, be it automated or not, of data contained or expected to feature in a file, with the exception of the processing defined in Article II – 4 of this Convention; 3) Any processing of data undertaken in the territory of a Member State of the African Union; 4) Any processing of data relating to public security, defense, research, criminal prosecution or State security, subject to the exceptions defined by specific provisions of other extant laws. Article II – 4: This Convention shall not be applicable to: 1) Data processing undertaken by a physical person within the exclusive context of his/her personal or domestic activities, provided however that such data are not meant for systematic communication to third parties or for dissemination; 2) Temporary copies produced within the context of technical activities for transmission and access to a digital network with a view to automatic, intermediate and temporary lodging of data and for the sole purpose of offering AU Draft0 010111

Select target paragraph3