0
+
Somalia's first dedicated data protection compliance firm.
Support through the registration, data protection audits, and compliance frameworks.
Staff training and institutional workshops on management and compliance.
Sector-specific advisory and strategy for businesses, banks, hospitals, universities and etc.
Reach our team for a compliance assessment or training tailored to your institution.
Call us now
Understanding where your institution stands on data protection can be the first step toward real accountability. We help you get there
We guide institutions through DPA registration from start to finish.
Our frameworks align with Data Protection Law No. 005 of 2023, GDPR, ISO 27001, and regional best practice.
Tailored compliance programs for banks, hospitals, universities, and government bodies.
Clear, practical compliance support from registration to ongoing monitoring.
We ensure adherence to laws, regulations and industry standards.
We evaluate compliance effectiveness and recommend improvements.
We develop robust policies and procedures that promote compliance and integrity.
We identify, assess and mitigate risks to secure and protect your organization.
Reach us during the week for consultations, assessments, or training inquiries.
Common questions about data protection compliance in Somalia.
Under the Data Protection Act 2023, organisations that collect, store, use, or otherwise process personal data in Somalia are required to register with the Data Protection Authority.
The Act specifically mandates that data controllers of "major importance" — generally those engaging data processors that handle personal data at scale register within six months of qualifying, with the DPA also able to designate other categories of controllers or processors based on the significance of the data they handle.
Not sure whether your institution qualifies? Use our free assessment tool or contact us for a quick determination.
Registration with the DPA involves confirming your institution's status as a data controller or processor, submitting the required registration documentation, and putting in place the internal policies and safeguards the Act requires including breach notification procedures, Data Protection Impact Assessments, and vendor management practices.
Registration is renewable annually, with fees prescribed by the Authority's General Manager. Togan handles the full process for you from initial assessment through document preparation and submission to the DPA so your institution can move through registration without the guesswork.
Yes. Togan provides capacity-building programmes designed to bring your staff up to speed on their obligations under the Data Protection Act from day-to-day handling of personal data to breach response and DPO readiness. Training is tailored to your sector, whether you're in banking, healthcare, education, or government.
Get the assistance you need to achieve your goal, contact us. We can help you get there.