The AfCFTA Digital Protocol: What It Means for Cross-Border Data Flows

The African Continental Free Trade Area (AfCFTA) is already reshaping the landscape of intra-African trade in goods. But its most transformative potential — and its most complex negotiating challenge — lies in the Digital Trade Protocol currently under negotiation. For businesses, regulators, and governments, the Protocol's provisions on cross-border data flows will have far-reaching implications that are only beginning to be understood.

The Data Flow Tension

At the heart of the Digital Trade Protocol negotiations is a fundamental tension between two legitimate policy objectives. On one side: the economic logic of free data flows. Data, unlike physical goods, can be replicated and transmitted at near-zero marginal cost; restricting its flow across borders imposes economic costs that compound as the digital economy deepens. On the other: the sovereignty logic of data localisation. Governments argue that keeping data within national borders is necessary for security, for ensuring law enforcement access, and for capturing the economic value of data within the domestic economy.

This tension is not unique to Africa — it animates trade policy debates globally. But the African context adds distinctive dimensions: concerns about data colonialism (African data being processed and monetised by non-African companies); the youth and limited capacity of many national data protection regimes; and the legitimate security concerns of states with fragile digital infrastructure.

What the Protocol Is Likely to Include

While negotiations are ongoing, the emerging contours of the Digital Trade Protocol suggest several key provisions on data flows: a general principle favouring free cross-border data flows, subject to exceptions; a harmonised approach to data protection based on the Malabo Convention; mutual recognition mechanisms for national data protection frameworks; and a dispute resolution mechanism for data flow disagreements. The extent to which data localisation requirements will be permitted as exceptions — and under what conditions — remains the central unresolved negotiating issue.

Implications for Businesses

For businesses operating across African markets, the Protocol offers the prospect of a significantly simplified regulatory environment for cross-border data operations. Currently, navigating 55 different national data governance regimes is a major compliance burden that disadvantages African companies relative to global competitors who operate under more harmonised regional frameworks. A harmonised AfCFTA data framework would reduce this burden and accelerate the growth of pan-African digital businesses.