Here is the honest situation. The African Union Convention on Cyber Security and Personal Data Protection, the Malabo Convention, entered into force in 2023 and shapes national law across ratifying states. It runs on three pillars: rules for electronic transactions and e-commerce, a full personal data protection regime with principles, controller duties, data subject rights and a national protection authority, and a cyber security and cybercrime framework covering critical infrastructure and substantive offences. Working out how the Convention translates into your obligations, and evidencing each to a national authority, is real work, and an organization that treats it as aspirational rather than operational is exactly where organizations fall short.
This Kit removes that decoding. It is every Malabo obligation written as an adopt-ready control you personalize in a weekend, with the evidence a national authority examines.
What you get, the moment you buy
Grounded in the African Union Convention on Cyber Security and Personal Data Protection (the Malabo Convention), with the electronic transactions rules, the personal data protection principles and rights, the national protection authority and the cyber security and cybercrime framework called out. Editable Word and Excel files.
What one control looks like
This is electronic transactions and e-commerce, the Convention's first pillar. All 34 are built to this depth.
Why this is not another template pack
- The evidence is the point. A duty you cannot evidence is exposure to a national authority. This tells you what an authority examines and where organizations fall short, for every obligation.
- All three pillars built in. Electronic transactions, the data protection regime and the cyber security and cybercrime framework are written into the controls, the full scope the Convention requires.
- Built on a mapped compliance corpus, not one person's opinion, from a graph of thousands of controls across standards.
- It compounds. Malabo aligns with the GDPR model and national African data protection laws, so this work feeds a broader continental privacy and security program.
Who buys this
Organizations operating in African Union member states that have ratified or are implementing the Convention, and the privacy, legal and security leads who own it. Whether it is a first assessment or a market entry, you save weeks and walk in with the three pillars structured.
Common questions
Is it really editable? Yes. Word and Excel files you own and adapt. No portal, no subscription.
Is this legal advice? No. It is an implementation toolkit grounded in the Convention. For a specific matter consult local counsel; this gets your controls and evidence in order fast.
Does it cover cybercrime? Yes. The substantive offences, illegal access, interference, computer fraud and forgery and content offences, plus procedural and cooperation measures, are a control group.
Does it cover data protection? Yes. The principles, controller duties, data subject rights and the national authority are three of the six control groups.
What if it is not for me? A 30-day money-back guarantee.
Instant digital download · 30-day money-back guarantee · The Art of Service Pty Ltd, GPO Box 2673, Brisbane QLD 4001 · support@theartofservice.com