What we know Three countries, Kenya, Uganda and Zimbabwe, have already enacted personal data protection legislation, the promulgation of which has not yet been made effective, as the laws are still in the form of bills. Tanzania is in the process of enacting personal data protection legislation. Nigeria - the African country with the most Internet users, does not have a data protection law and a data-protection bill that was introduced in 2010 is still making its way through parliament 5