In Mozambique there is no specific legislation on data protection or privacy. However, there are other sources of law that impose some privacy obligations, including:

• Constitution of the Republic of Mozambican, as approved by the Parliament on 16 November 2004 (“CRM”);
• The Civil Code (Decree-Law no. 47344, of November 25, 1966, in force in Mozambique through Edict no. 22869, dated September 4, 1967);
• The Penal Code (Law no. 24/2019, of December 24, as amended by Law no. 17/2020 of 23 December);
• The new Labour Law (Law no. 13/2023, of 25 August) which enters into force on 22 February 2023;
• The Credit Institutions and Financial Companies Law (Law n.º 20/2020, of 31 December) ("LCIFC”);
• The Electronic Transactions Law (Law no. 3/2017, of January 9);

• The Consumer Law (Law n.º 22/2009, of 28 September);

• The Consumer Law Regulations (Decree n.º 27/2016, of 18 July); 

• The Publicity Code (Decree No. 38/2016, of 31 August 2016); 

• The Regulation on Licensing of Telecommunication and Scarce Resources (Decree no. 26/2017, of 30 June); 

• The Regulations on Registration and Licensing of Intermediary Electronic Service Providers and Operators of Digital Platforms (Decree no. 59/2023, of 27 October); and
• Resolution no. 5/2019, of 20 June, ratifies the African Union Convention on Cybersecurity and Personal Data Protection (“AU Convention”); and
• Proposal of Cybersecurity Law, available at the National Institute for Technologies and Communication (“INTIC”) website, identified as version 6 of 15 September 2023 (“Cybersecurity Law”).