Comprehensive overview of AI laws, policies, and regulatory frameworks across Africa and the Middle East — covering the UAE, Saudi Arabia, Kenya, South Africa, Nigeria, Egypt, Rwanda, and regional initiatives by the AU and GCC.
Comprehensive Reference Last Updated: February 2026 10+ Jurisdictions
Africa and the Middle East represent two of the most dynamic and diverse regions for AI governance development. The Middle East, led by the UAE and Saudi Arabia, has pursued ambitious AI investment strategies with dedicated government ministries. Africa, home to the world’s youngest population, is developing AI governance frameworks that address unique challenges including digital infrastructure gaps, data sovereignty concerns, and the need to ensure AI benefits reach the continent’s 1.4 billion people.
Key Regional Dynamics: These regions present striking contrasts. The Gulf states have among the world’s highest AI investment per capita and dedicated AI government structures. African nations face infrastructure challenges but are developing innovative governance models that prioritize inclusion, local context, and South-South cooperation. Both regions are actively shaping global AI governance through participation in UNESCO, OECD, and G20 processes, bringing perspectives underrepresented in EU/US-dominated frameworks.
Regional Landscape at a Glance
Country
Approach
Primary Framework
Status
Key Focus
UAE
National strategy + ministry
UAE National AI Strategy 2031; Minister of State for AI
Advanced
Economic diversification, government services, global AI hub
Saudi Arabia
National authority + strategy
SDAIA; National AI Strategy; AI Ethics Principles
Active
Vision 2030, data governance (PDPL), AI investment
Kenya
Strategy + task force
AI Strategy (2025); Blockchain & AI Taskforce Report
Developing
Digital economy, data protection (DPA 2019), fintech AI
South Africa
Policy + commission
Presidential Commission on 4IR; AI Policy (draft)
Developing
Inclusive growth, POPIA data protection, inequality reduction
Nigeria
Strategy + emerging regulation
National AI Strategy (2024); NDPA data protection
Active
Digital economy, startup ecosystem, data governance
Egypt
National strategy
National AI Strategy (2020); NCAI
Active
Government modernization, Arabic AI, youth employment
Rwanda
Policy + innovation hub
National AI Policy (2023); C4IR Africa
Active
AI for development, C4IR hub, digital transformation
2. United Arab Emirates UAE
The UAE has positioned itself as a global leader in AI governance and investment, becoming the first country to appoint a Minister of State for Artificial Intelligence, Digital Economy, and Remote Work Applications in 2017. The UAE’s approach combines massive public investment with governance frameworks designed to attract global AI companies and talent.
2.1 UAE National AI Strategy 2031
Launched in 2017 and updated to 2031, the strategy aims to make the UAE the world’s leading nation in AI by 2031 across key economic sectors.
Strategic Objectives
Objective
Target
Key Actions
Government Efficiency
AI-powered government services across all federal entities
50% reduction in government operational costs; AI-first policy for new services
Economic Impact
AED 335 billion ($91B) contribution to GDP by 2031
AI adoption across 9 priority sectors; startup ecosystem support; FDI attraction
Global Leadership
Top 10 globally in AI readiness and investment
International partnerships; hosting global AI events; governance leadership
Human Capital
World-class AI talent pipeline
AI education from K-12; Mohamed bin Zayed University of AI (MBZUAI); talent visas
Data Infrastructure
Comprehensive national data ecosystem
Open data platform; data sharing frameworks; cloud-first policy
2.2 National AI Programme (Brain)
The National Program for Artificial Intelligence (BRAIN) coordinates AI implementation across government, including:
AI Ethics Board: Advisory body providing guidance on ethical AI development and deployment
AI Lab: Government innovation lab testing AI solutions for public services
Sector Roadmaps: AI implementation plans for healthcare, education, energy, transportation, space, and water management
AI Camp: Training program providing AI skills to government employees across all departments
2.3 UAE Data Protection
Federal Decree-Law No. 45/2021 (Personal Data Protection): UAE’s first comprehensive federal data protection law; effective January 2022; covers personal data processed by AI systems
DIFC Data Protection Law: Dubai International Financial Centre’s standalone law aligned with GDPR standards; regulates AI in financial services
ADGM Data Protection Regulations: Abu Dhabi Global Market framework; comprehensive GDPR-aligned regime for the financial free zone
Automated Decision-Making: UAE data protection laws include provisions on profiling and automated decision-making with individual rights
2.4 Mohamed bin Zayed University of AI (MBZUAI)
Established in 2019, MBZUAI is the world’s first graduate-level AI research university. It plays a key governance role through:
Research on AI safety, ethics, and governance
Development of AI evaluation methodologies and benchmarks
International collaboration on responsible AI research
Advisory role to UAE government on AI policy
2.5 Key Institutions
Body
Role
Website
Minister of State for AI
National AI strategy; cross-government coordination; international representation
Saudi Arabia has established one of the world’s most well-resourced AI governance structures through the Saudi Data and Artificial Intelligence Authority (SDAIA), directly linked to the Crown Prince’s office. AI is a central pillar of Saudi Vision 2030’s economic diversification strategy.
3.1 SDAIA and National AI Strategy
SDAIA, established by Royal Order in 2019, serves as the national authority for data and AI, with both strategic and regulatory functions.
SDAIA Components
Entity
Function
Key Activities
NDMO
National Data Management Office; data governance and regulation
PDPL implementation; data classification; open data; data sharing frameworks
NIC
National Information Center; data infrastructure
National data platform; digital identity; data integration across government
NCAI
National Center for AI; AI strategy execution
AI research, training, sector roadmaps, AI ethics guidelines
3.2 Personal Data Protection Law (PDPL, 2022)
Saudi Arabia’s PDPL, effective September 2023 with full enforcement from September 2024, is the Kingdom’s first comprehensive data protection law.
Consent-Based Framework: Processing personal data generally requires consent or falls under specified exemptions
Automated Decision-Making: Article 18 gives individuals the right not to be subject to decisions based solely on automated processing that produce legal or significant effects
Data Transfer: Cross-border transfers restricted; data localization requirements for certain categories
Sensitive Data: Heightened protections for health, biometric, genetic, and financial data used in AI
Penalties: Up to SAR 5 million (~$1.3M) per violation; criminal penalties for certain offenses
3.3 AI Ethics Principles
SDAIA published AI ethics principles aligned with OECD and UNESCO frameworks:
Fairness: AI systems must be equitable and non-discriminatory
Transparency: AI decisions should be explainable and auditable
Security: AI systems must be secure and robust
Privacy: Personal data in AI must be protected
Humanity: AI must serve human welfare and Saudi society’s values
Social & Environmental Benefit: AI should contribute to sustainable development
3.4 NEOM and AI Investment
Saudi Arabia’s flagship NEOM project represents one of the world’s largest AI deployment programs, with AI integrated into city management, transportation, healthcare, and governance. The $500 billion megaproject serves as both a testing ground and showcase for AI governance.
4. Kenya Kenya
Kenya is one of Africa’s most dynamic digital economies and a leader in AI governance on the continent. Home to a thriving tech startup ecosystem (“Silicon Savannah”) and innovative mobile money platforms, Kenya has developed AI governance frameworks that address both opportunity and risk.
4.1 Blockchain & AI Taskforce Report (2019)
Kenya’s government established a dedicated taskforce in 2018 that produced comprehensive recommendations for AI governance, covering:
Regulatory Framework: Recommendations for AI-specific legislation balancing innovation with protection
Government AI Use: Guidelines for deploying AI in public services including healthcare, agriculture, and security
Data Governance: Integration with Kenya’s Data Protection Act (2019) for AI data handling
Digital Infrastructure: Investment recommendations for computing capacity and connectivity
Skills Development: AI education and workforce training priorities
4.2 Data Protection Act (2019)
Kenya’s Data Protection Act, one of Africa’s most comprehensive, provides the legal foundation for AI data governance.
Provision
Description
AI Relevance
Automated Decision-Making
Section 35: Right not to be subject to decisions based solely on automated processing
Directly regulates AI decision-making in credit, employment, profiling
Data Protection Impact Assessment
Required for high-risk processing activities
Mandatory for AI systems processing personal data at scale
Consent Framework
Specific, informed consent required; legitimate interest as alternative basis
AI training on personal data requires valid legal basis
Cross-border Transfers
Transfers restricted to countries with adequate protection
Impacts global AI services operating in Kenya
Data Commissioner
Office of the Data Protection Commissioner as independent regulator
Enforcement authority for AI-related data protection violations
4.3 National AI Strategy (2025)
Kenya’s National AI Strategy, developed with support from UNESCO and international partners, focuses on:
AI for SDGs: Using AI to advance Sustainable Development Goals, particularly in health, agriculture, and education
Fintech AI: Governance of AI in Kenya’s world-leading mobile money ecosystem (M-Pesa and beyond)
Startup Ecosystem: Supporting AI startups while ensuring responsible development
Agricultural AI: Precision farming, crop disease prediction, market information systems
Healthcare AI: Telemedicine, diagnostic AI, public health surveillance
5. South Africa South Africa
South Africa brings a unique perspective to AI governance, shaped by its constitutional emphasis on equality, its apartheid legacy requiring attention to algorithmic bias, and its position as Africa’s most industrialized economy.
5.1 Presidential Commission on the Fourth Industrial Revolution (PC4IR)
Established by President Ramaphosa in 2019, the PC4IR produced comprehensive recommendations for AI and emerging technology governance.
Key Recommendations
National AI Institute: Establish a dedicated AI research and governance institution
AI Ethics Framework: Develop national ethical guidelines for AI aligned with South Africa’s constitutional values
Inclusive AI: Ensure AI development addresses South Africa’s inequality challenges; prevent algorithmic discrimination
Infrastructure Investment: National data infrastructure, computing capacity, and broadband connectivity
Education Reform: Integrate AI education across all levels; establish centers of AI excellence at universities
Regulatory Modernization: Update sector-specific regulations for AI; create innovation sandboxes
5.2 POPIA (Protection of Personal Information Act)
South Africa’s POPIA, fully effective since July 2021, is one of Africa’s strongest data protection laws and directly impacts AI governance.
Automated Decision-Making (Section 71): Data subjects may not be subject to decisions based solely on automated processing, including profiling, unless certain conditions are met
Special Personal Information: Enhanced protections for biometric data, health data, and children’s data used in AI systems
Purpose Limitation: Personal data collected for one purpose cannot be repurposed for AI training without consent
Information Regulator: Independent regulator with enforcement powers; has begun investigating AI-related complaints
Penalties: Up to R10 million (~$530K) in fines; imprisonment up to 10 years for certain offenses
5.3 National AI Policy Framework (Draft)
South Africa’s Department of Communications and Digital Technologies has been developing a National AI Policy Framework addressing:
Constitutional Alignment: Ensuring AI systems respect South Africa’s Bill of Rights, including equality, dignity, and privacy
Bias and Discrimination: Mandatory bias testing for AI systems used in public decision-making; historically disadvantaged communities must not be disproportionately affected
Language and Culture: AI systems serving South Africa must account for 11 official languages and diverse cultural contexts
Public Participation: Meaningful consultation with affected communities in AI governance decisions
6. Nigeria Nigeria
Nigeria, Africa’s largest economy and most populous nation, is developing AI governance frameworks that address its massive market, vibrant startup ecosystem, and unique challenges of governing AI across a diverse federation of 36 states.
6.1 National AI Strategy (2024)
Nigeria’s National Artificial Intelligence Strategy, developed by the National Information Technology Development Agency (NITDA) with stakeholder input, outlines the country’s vision for responsible AI development.
Economic Growth: AI-driven economic diversification beyond oil; support for Nigerian AI startups and companies
Governance: Ethical AI framework; public sector AI guidelines; risk assessment mechanisms
Skills: AI talent development; integration with universities; digital literacy programs
Infrastructure: Data centers, computing capacity, broadband connectivity expansion
Inclusive AI: AI that serves Nigeria’s diverse population; supports local languages; addresses rural-urban divide
6.2 Nigeria Data Protection Act (NDPA, 2023)
The NDPA, enacted in June 2023, replaced the interim NDPR (2019) as Nigeria’s comprehensive data protection law.
Automated Decision-Making: Provisions addressing automated individual decision-making and profiling
Data Protection Commission: Nigeria Data Protection Commission (NDPC) as independent regulator
Lawful Processing: Six legal bases including consent and legitimate interest applicable to AI data processing
Cross-border Transfers: Adequacy-based framework; data localization requirements for certain categories
Penalties: Up to 2% of annual gross revenue or NGN 10 million, whichever is higher
6.3 NITDA AI Governance Framework
NITDA has published draft guidance for AI governance in Nigeria:
Ethical Principles: Fairness, transparency, accountability, safety, privacy, and inclusiveness
Sector-Specific Guidance: AI in fintech (CBN regulations), healthcare (NAFDAC), and telecommunications (NCC)
Startup Support: Innovation sandboxes; startup registration; responsible AI certification
7. Egypt Egypt
Egypt launched its National AI Strategy in 2020, establishing the National Council for AI (NCAI) to coordinate AI development and governance. Egypt’s approach emphasizes government modernization, youth employment, and Arabic language AI.
7.1 National AI Strategy (2020)
Four Pillars
Pillar
Description
Key Actions
AI for Government
Modernize government services using AI
Digital government; automated processes; citizen service improvement; e-governance
AI for Development
AI for economic and social development
Agriculture optimization; health diagnostics; Arabic NLP; smart infrastructure
Capacity Building
Develop AI talent and skills
AI specialization at universities; vocational training; online courses; AI scholarship programs
International Cooperation
Position Egypt as regional AI hub
Partnerships with UNESCO, ITU, WEF; hosting regional AI events; bilateral cooperation
7.2 Egypt AI Charter
The NCAI has developed an AI Ethics Charter establishing principles for responsible AI:
Transparency and explainability in AI decisions
Non-discrimination and fairness across Egyptian society
Privacy and data protection (aligned with Egypt’s Personal Data Protection Law No. 151/2020)
Safety and security of AI systems
Accountability for AI outcomes
Social responsibility and public benefit
7.3 Personal Data Protection Law (No. 151/2020)
Egypt’s first comprehensive data protection law
Consent-based framework applicable to AI data processing
Data Protection Center for enforcement
Cross-border transfer restrictions
Penalties up to EGP 5 million (~$100K)
8. Rwanda & Emerging African Regulators Rwanda
8.1 Rwanda
Rwanda has positioned itself as Africa’s AI governance innovator, hosting the Centre for the Fourth Industrial Revolution Africa (C4IR Africa) in partnership with the World Economic Forum.
National AI Policy (2023): Comprehensive framework covering AI development, governance, and ethics
C4IR Africa: Continental hub for responsible technology governance; develops policy frameworks adopted across Africa
AI Use Cases: Drone delivery (Zipline), healthcare AI, agricultural technology, smart cities in Kigali
Data Protection: Law No. 058/2021 on personal data protection and privacy
National AI Strategy (2018): One of the first in Africa; Mauritius AI Council established
Data Protection Act (2017): GDPR-influenced; comprehensive framework for AI data governance
Financial Services AI: Regulatory sandbox for AI in financial services through Bank of Mauritius
8.3 Ghana
National AI Strategy (draft): Under development with UNESCO support
Data Protection Act (2012): Early African data protection law; Data Protection Commission operational
Google AI Research Lab: First Google AI lab in Africa, opened in Accra (2019); contributes to local AI governance discussions
8.4 Tunisia
National AI Strategy (2023): Focus on economic transformation, youth employment, and francophone AI
Data Protection: Organic Law on Personal Data Protection (2004); National Authority for Personal Data Protection
AI Talent: Strong computer science education; emerging AI startup ecosystem
8.5 Ethiopia
Digital Ethiopia 2025: National digital strategy including AI components
AI for Development: Focus on agricultural AI, health systems, and government efficiency
Data Protection: Draft data protection law under development
9. African Union Frameworks
The African Union (AU) has developed continental frameworks for AI governance that aim to ensure Africa shapes AI development in ways that address the continent’s unique needs and opportunities.
9.1 AU Digital Transformation Strategy (2020–2030)
The AU’s digital strategy includes AI as a key enabling technology for African development:
Digital Infrastructure: Continental broadband connectivity; data center development; regional internet exchange points
Digital Skills: AI and digital literacy programs; STEM education; digital entrepreneurship
Digital Innovation: Support for African AI startups; technology transfer; continental innovation hubs
Digital Governance: Harmonized regulatory frameworks; data governance; cybersecurity standards
9.2 AU Continental AI Strategy (2024)
The AU Commission developed a Continental AI Strategy providing a framework for harmonized AI governance across member states.
Strategic Pillars
Pillar
Description
Key Actions
African-Centric AI
AI development reflecting African values, languages, and needs
African language AI models; cultural context awareness; local dataset development
Inclusive Growth
AI that benefits all Africans, including rural and marginalized populations
Agricultural AI; health AI for underserved areas; digital inclusion programs
Data Sovereignty
African control over African data; prevent data exploitation
Data localization guidelines; sovereign cloud infrastructure; data sharing agreements
Ethical AI
AI aligned with African ethical traditions and human rights
Continental ethics framework; community consultation; Ubuntu philosophy in AI
Capacity Building
Developing continental AI capabilities and human capital
Pan-African AI centers of excellence; exchange programs; joint research initiatives
9.3 Malabo Convention (2014)
The African Union Convention on Cyber Security and Personal Data Protection (Malabo Convention) provides the continental framework for data protection relevant to AI:
Data Protection: Establishes principles for personal data processing across Africa
Cybersecurity: Framework for securing digital infrastructure including AI systems
Ratification Status: Entered into force in June 2023 after achieving 15 ratifications; growing adoption across member states
National Implementation: Member states progressively adopting national laws aligned with the Convention
9.4 Smart Africa Alliance
The Smart Africa initiative, involving 36 African countries, promotes AI and digital transformation:
AI Blueprint: Continental guidance for AI strategy development
Data Protection: Model data protection law template for member states
Innovation Ecosystem: Pan-African innovation hubs and startup support
10. GCC & Regional Middle East Initiatives
10.1 Gulf Cooperation Council (GCC)
The GCC nations (UAE, Saudi Arabia, Qatar, Kuwait, Bahrain, Oman) are collectively among the world’s highest AI investors per capita. Regional coordination includes:
Unified Cybersecurity Strategy: GCC-wide cybersecurity framework including AI security provisions
Data Flow Agreements: Intra-GCC data sharing facilitating regional AI development
Joint AI Initiatives: Collaborative AI research and development programs; shared computing resources
Economic Diversification: AI central to post-oil economic strategies across all GCC states
10.2 Qatar
National AI Strategy (2019): Focus on AI in government services, healthcare, transportation, and sports (FIFA World Cup AI deployment)
QCRI: Qatar Computing Research Institute at Hamad Bin Khalifa University; leading Arabic AI research
Data Protection Law (Law No. 13/2016): Personal data protection with provisions relevant to AI
10.3 Bahrain
National AI Strategy (2019): Four pillars: policy and governance, talent, research, and application
Personal Data Protection Law (2018): Comprehensive data protection with AI implications
Fintech Sandbox: AI-friendly regulatory sandbox for financial technology innovation
10.4 Israel (Cross-reference)
While covered in the Asia-Pacific Emerging Regulators section, Israel’s AI ecosystem is one of the Middle East’s most advanced, with significant AI governance developments including sector-specific regulation and innovation-focused policy.
10.5 Jordan
AI Policy (2020): National policy focusing on AI for government services and economic development
MODEE: Ministry of Digital Economy and Entrepreneurship; AI strategy coordination
Data Protection: Draft data protection law under development
11. Comparative Analysis
11.1 Regulatory Approach Comparison
Dimension
UAE
Saudi Arabia
Kenya
South Africa
Nigeria
Approach
Strategy + ministry
Authority + strategy
Strategy + task force
Commission + policy
Strategy + regulation
Dedicated AI Body
Minister of State for AI
SDAIA (national authority)
AI Taskforce
PC4IR
NITDA AI Division
Data Protection
Federal Decree-Law 45/2021
PDPL (2022)
DPA (2019)
POPIA (2021)
NDPA (2023)
Automated Decision Rights
Limited provisions
Article 18 (PDPL)
Section 35 (DPA)
Section 71 (POPIA)
NDPA provisions
Investment Level
Very high ($91B target)
Very high (Vision 2030)
Moderate (growing)
Moderate
Growing (private sector)
Key Challenge
Governance matching investment pace
Balancing control & innovation
Infrastructure gaps
Inequality & inclusion
Scale & federal coordination
12. Trends & Future Outlook
12.1 Key Trends
Data Sovereignty Movement
Both African and Middle Eastern nations are increasingly asserting data sovereignty — the principle that data generated within their borders should be governed by local laws. This has significant implications for global AI companies and cross-border AI services, particularly as African nations develop data localization requirements and the AU promotes continental data governance frameworks.
Gulf AI Investment Surge
The Gulf states are among the world’s highest AI investors, with massive sovereign wealth fund allocations to AI companies and infrastructure. Saudi Arabia’s $100B+ technology investment fund, UAE’s AI-first government strategy, and Qatar’s post-World Cup digital infrastructure create both opportunities and governance challenges as deployment outpaces regulation.
African AI for African Needs
African AI governance increasingly emphasizes locally-developed AI solutions addressing African challenges — agricultural optimization, healthcare access, financial inclusion, and climate adaptation. This “AI for Africa” movement challenges the dominance of solutions designed for Western contexts and pushes for AI that works with African languages, cultural contexts, and infrastructure realities.
Data Protection as Gateway
Across both regions, data protection laws are serving as the primary legal basis for AI governance. Kenya’s DPA, South Africa’s POPIA, Nigeria’s NDPA, Saudi Arabia’s PDPL, and UAE’s data protection law all include automated decision-making provisions that function as de facto AI regulation pending AI-specific legislation.
12.2 Future Developments
AU Continental AI Framework Implementation: Progressive adoption by member states; harmonization with national strategies
Arabic AI Development: Gulf-funded investment in Arabic language models; implications for AI governance across 22 Arabic-speaking nations
South Africa AI Legislation: Potential comprehensive AI law building on POPIA and PC4IR recommendations
Nigeria AI Regulation: NITDA framework development; sector-specific AI rules for fintech and telecoms
GCC AI Harmonization: Increasing coordination on AI standards and data governance across Gulf states
Malabo Convention Expansion: Growing ratification enabling continental data governance alignment