Definition of data

Under Article 2 (1) of the Personal Data Protection Proclamation No.1321/2024, “Data” means information that:

1. is being processed by means of equipment operating automatically in response to instructions given for that purpose;
2. is collected with the intention that it should be processed by means of such equipment mentioned in (a);
3. is recorded as part of a filing system or with the intention that it should form part of a filing system; or
4. does not fall within (a), (b) or (c) but forms part of any other accessible public record. 

Definition of personal data

Under Art. 2 (2) of the Personal Data Protection Proclamation No.1321/2024, "Personal Data” is defined as any information relating to an identified or identifiable natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. 

The Freedom of the Mass Media and Access to Information Proclamation No. 590/2008, applicable to government entities, is understood to generally define personal data as information about an identifiable individual that relates, but is not limited, to: 

• medical, education, academic, employment, financial transaction, professional or criminal history;
• ethnic, national or social origin, age, pregnancy, marital status, color, sexual orientation, physical or mental health, well-being, disability, religion, belief, conscience, culture, language or birth;
• an identification number, symbol or other identifier assigned to the individual, address, fingerprints or blood type;
• personal opinions, views or preferences, except as relate to another individual;
• views or opinions on grant proposals, awards, or prizes granted to another individual, provided such views or opinions are not associated with the other individual’s name;
• views or opinions of others about the individual; or
• an individual’s name, in combination with other personal data, or alone, if could reasonably be linked to personal data (exception applies for persons deceased for more than 20 years).

The Ethiopian Communications Authority’s Consumers Rights and Protection Directive 2020 defines personal information as private information and record relating to consumers leading to identify such consumer such as his identity, address or telephone number and/or traffic and billing data and/or other personal information. 

Definition of sensitive personal data

Article 2 (5) of the Personal Data Protection Proclamation No.1321/2024 defines “Sensitive Personal Data” as a natural person's data on:

• racial or ethnic origins;
• genetic or biometric data; or
• physical or mental health or condition.