Page 25
The protection authority may be seized by any person acting on his/her own, or through
a lawyer or any other duly mandated physical person or corporate body.
Section III: Institutional framework for protection of personal data
Chapter 1: Status, composition or organization
Article II – 14:
Each Member State of the African Union shall establish an authority with responsibility
to protect personal data.
The body so established shall be an independent administrative authority with the task
of ensuring that the processing of personal data is conducted in accordance with the
provisions of this Convention.
Article II – 15:
The protection authority shall inform the concerned persons and the processing officials
of their rights and responsibilities.
Article II – 16:
The protection authority shall comprise parliamentarians, deputies, senators, senior
judges of the Tribunal of Accounts, Council of State, Civil and Criminal Appeal Court,
personalities qualified as a result their knowledge of computer science, as well as
professional networks or sectors.
Article II – 17:
Sworn agents may be invited to participate in audit missions in accordance with extant
provisions in Member States of the African Union.
Article II – 18:
Members of the protection authority shall be subject to professional secrecy in
accordance with the extant texts of each Member State.
Each protection authority shall formulate rules of procedure containing, inter alia, rules
governing deliberations, processing and presentation of cases.
Article II – 19:
AU Draft0 010111