Somalia
AI behavior law: bot and agent disclosure, crawler and training-data rules, automated-agent transactions, and algorithmic decision-making.
Summary
Somalia enacted a Data Protection Act in March 2023 (Law No. 005 of 2023), signed by the President on 21 March 2023 and effective 23 March 2023. This is notable for a fragile-state context. The Data Protection Authority (DPA) was launched in February 2024 and published initial guidance. The Act establishes GDPR-style rights (access, rectification, erasure, objection to automated decisions) and lawful-basis requirements; public availability does not exempt personal data from the Act. No comprehensive cybercrime act is currently in force at the federal level; applicable criminal provisions are fragmented. No specific scraping statute, no TDM exception, no sui generis database right. Confidence low: rule-of-law and enforcement capacity remain severely limited by ongoing conflict; the DPA is newly established; the Act's implementation is early-stage. Fast-moving due to newly operationalised DPA.
Automated-access legality
Carried forward from the crawler-law index. Governs whether automated clients may access public websites in this jurisdiction.
| Dimension | Value |
|---|---|
| Authorization test | unsettled |
| Public-page carve-out | unsettled |
| Terms-of-service browsewrap enforceable | unsettled |
| Terms-of-service clickwrap enforceable | unsettled |
| Copyright exception model | closed list |
| Text and data mining — commercial status | unsettled |
| Text and data mining — opt-out mechanism | none |
| robots.txt legal weight | non binding notice |
| AI training-specific law | none |
| Privacy regime | Data Protection Act 2023 (Law No. 005 of 2023; DPA launched February 2024) |
| Trespass to chattels | not recognized |
Last reviewed: 2026-05-23. Confidence: low. Fast-moving area — verify before relying. Not legal advice.