The document discusses and compares the Mobile Privacy Principles developed by GSMA and the African Union Convention on Cyber Security and Personal Data Protection. The Mobile Privacy Principles were created in 2011 to describe how mobile users' privacy should be respected and protected when using mobile apps and services that access personal information. The African Union convention establishes a regulatory framework for cybersecurity and personal data protection that respects citizens' rights under domestic and international law. While there is some overlap between the key principles of openness, purpose limitation, and security in both frameworks, the Mobile Privacy Principles include additional elements around children's privacy, accountability, and privacy by design that are not specifically addressed in the African Union convention. Harmonizing these frameworks to

1. AFRICAN UNION CONVENTION ON
CYBER SECURITY
AND PERSONAL DATA PROTECTION
and
Mobile Privacy Principles
Final projet on Principles of Mobile Privacy courses gsmatraining
By : Serge parfait Goma

2. plan
➢ Context
➢ What are we talking about ?
➢ What is mobile privacy principles ?
➢ What is african union convention on cspdp ?
➢ mobile privacy principles vs african union
convention on cspdp
➢ Analyse
➢ Challenges
➢ Suggestion
➢ references

3. A single profil can include more
1500 data point (a person
sexuality, browers history, political
affliation, medical records.
Ex :
acxiom claim to have 10 % of
world people datas
is not only business in 2013
snowden show that vast regime
of mass governement surveillance
programmes .
context
In digital age, data play a
huge role in our every day
life is presenting in various
way
example: online shoping you
have to type your name,
email addres, address, but
data collecting can also be
less visible than this
exemple

4. what are we talking about ??
● privacy ?
The article 12 of the unversal
declaration of Human rights
say:
no one shall be subjected to
arbitrary interference with
privacy ,family, home or
correspondence
everyone has the right the
protection of the law against
such interference or attacks
Data protection
Data protection is not the same thing as
privacy, privacy is a broad concept
refering to the condition with enablyng
basic fundation of human dignity and
autonomy
data protection is more specific it
concerns in te way campany and third
parties handle confidential information of
constumer
data
Protection ?
Data protection

5. What is mobile privacy principles ?
These principles were developed in 2011 and
describe the way in which mobile consumers’
privacy should be respected and protected
when consumers use mobile applications and
services that access, use or collect their
personal information.
based on recognised and
internationally accepted principles on privacy and data
protection. The key overarching objective of these
principles is to foster business practices and standards
that deliver meaningful transparency, notice, choice and
control for mobile users with regards to their personal
information and the safeguarding of their privacy.
The GSMA represents the
interests of mobile operators
worldwide, uniting nearly 800
operators with more than 250
companies in the broader
mobile ecosystem,including
handset and device makers,
software
companies,equipment
providers and internet
companies,as well as
organisations in adjacent
industry sectors. The GSMA
also produces industry-
leading events such
as Mobile World Congress,
Mobile World Congress
Shanghai and the Mobile 360
Series conferences.
I
Overview on GSMA
II
III

6. What is AFRICAN UNION CONVENTION ON
CYBER SECURITY AND PERSONAL DATA PROTECTION ?
Our work will focus on the aspect of personal data protection
This an establishment of a regulatory framework on
cyber-security and personal data protection takes into
account the requirements of respect for the rights of
citizens, guaranteed under the fundamental texts of
domestic law and protected by international human rights
Conventions and Treaties, particularly the African Charter
on Human and Peoples' Rights;
I
II
The AU CCSPDP is a Legal
Framework for
Cyber-security and Personal
Data Protection embodies
the existing commitments of
African Union Member
States at sub-regional,
regional and international
levels to build
the Information Society.
Is aims at defining the
objectives and broad
orientations of the
Information Society in Africa
and strengthening existing
legislations on Information
and Communication
Technologies (ICTs) of
Member States and the
Regional Economic
Communities (RECs);
This an establishment of a regulatory framework on
cyber-security and personal data protection takes into
account the requirements of respect for the rights of
citizens, guaranteed under the fundamental texts of
domestic law and protected by international human rights
Conventions and Treaties, particularly the African Charter
on Human and Peoples' Rights;
Our focus

7. High level privacy principles AU convention on cyber security and
personal data protection
1
Openness, Transparency and Notice
Responsible persons shall be open and honest
with users and will ensure users are provided
with clear, prominent and timely information
regarding their identity and data privacy
practices. Users shall be
provided with information about persons
collecting personal information about them, the
purposes of an application or service, and about
the access, collection, sharing and further use of
a users’ persona information, including to whom
their personal information may be disclosed,
enabling users to make informed decisions
about whether to use a mobile application or
service
3
Purpose and Use
The access, collection, sharing, disclosure and
further use of users’ personal information shall
be limited to meeting legitimate business
purposes, such as providing applications or
services as requested by users, or to otherwise
meet legal obligations.
5User Choice and Control
Users shall be given opportunities to
exercise meaningful choice, and control
over their personal information
Articles 13
Principle 5: Principle of transparency of
personal data processing
The principle of transparency requires
mandatory disclosure of information on personal
data by the data controller.
2
Articles 13
Principle 3: Principle of purpose, relevance and storage
of processed personaldata
a) Data collection shall be undertaken for specific, explicit
and legitimate purposes, and not further processed in a way
incompatible with those purposes;
b) Data collection shall be adequate, relevant and not
excessive in relation to the purposes for which they are
collected and further processed;
4
Articles 17 Right of access
Article 18: Right to object
Articles 19 :Right of rectification or
erasure
6

8. High level privacy principles AU convention on cyber security and
personal data protection
7Data Minimisation and Retention
Only the minimum personal information
necessary to meet legitimate business purposes
and to deliver, provision, maintain or develop
applications and services should be collected
and otherwise accessed and used. Personal
information must not be kept for longer than is
necessary for those legitimate business
purposes or to meet legal obligations and should
subsequently be deleted or rendered
anonymous
9Respect User Rights
Users should be provided with
information about, and an easy means
to exercise, their rights
over the use of their personal
information.
8
Articles 13
Principle 3: Principle of purpose, relevance and
storage of processed personaldata
a) Data collection shall be undertaken for specific,
explicit and legitimate purposes, and not further
processed in a way incompatible with those
purposes;…
Article 22:
Storage obligations
Personal data shall be kept for no longer than is
necessary for the purposes for which
the data were collected or processed
10
Article 16:
Right to information
The data controller shall provide the
natural person whose data are to be
processed with the following information,
no later than the time when the data are
collected, and regardless of the means
and facilities used, with the following
information:

9. High level privacy principles AU convention on cyber security and
personal data protection
11Security
Personal information must be
protected, using reasonable safeguards
appropriate to the
sensitivity of the information.
12
Article 21:
Security obligations
The data controller must take all appropriate
precautions, according to the nature of the
data, and in particular, to prevent such data from
being altered or destroyed, or
accessed by unauthorized third parties
Principle 6: Principle of confidentiality and
security of personal data processing
a) Personal data shall be processed
confidentially and protected, in particular
where the processing involves transmission of
the data over a network;

10. analyse
● We notice that they are same of important and specifics
principles and aspect of mobile privacy principles are missing
in the personal data protection convention of african union,
● those relevent point are not specificaly notice in the « chapter
II : personal data protection » we can list same principles and
aspects like :
– Children and Adolescents
– Education
– Accountability and Enforcement :
– Code and standards « concept of privacy by design »

11. Challenges
They still a lot to do regarding
digital laws in africa, privacy
and protection is one of the
biggest challenge in afrique

12. suggestion
● Make the promotion of african union convention on
cyber security and personal data protection.
● Create forum of discussion on the existing
convention base on comparaison study.
● Create open and multisteakholder task force to work
on update, impact and adaptability from the local
legislation to the african union framework
●

13. References
● https://www.gsma.com/publicpolicy/mobile-privacy-principles
● https://au.int/sites/default/files/treaties/29560-treaty-0048_-_african_union_conven
tion_on_cyber_security_and_personal_data_protection_e.pdf
,
● http://www.mfwa.org/wp-content/uploads/2017/09/brochureMFWA17.pdf
● https://www.youtube.com/watch?v=6vNxslcf9AE
● 05_ecsg_privacyframewk.pdf
● http://www.intuitive-
design.co.uk/clients/GSM/Annual_Report_2017/NonFinancial/index.html
●
https://www.youtube.com/watch?v=j6fO6JVGGHg

14. Thanks very much