(c)
(d)
exempted under the chapter on exemption; and
which originates outside of Ethiopia and merely transits through this country.
CHAPTER TWO
THE DATA PROTECTION COMMISSION OF ETHIOPIA
4.
(1)
(2)
5.
Establishment
The Data Protection Commission of Ethiopia (hereafter referred as Commission) is
hereby established as an independent entity.
The Commission is accountable to the House of Peoples’ Representatives.
Powers and Functions of the Commission
The Commission shall have the powers and functions to:
(1) ensure compliance with this Proclamation;
(2) make the administrative arrangement it considers appropriate for the discharge of its
duties;
(3) levy fees for the services it provides in accordance with a regulation to be issued to
implement this Proclamation;
(4) promote public awareness on issues which fall under this Proclamation;
(5) ensure that personal data processed by data controllers and data processors are done
according to the data protection principles;
(6) monitor the use of personal data and sensitive personal data; submit periodical reports
to the House; and make such documents available to the public;
(7) undertake research into, and monitor developments in data processing and computer
technology to ensure that any adverse effects of such developments on the privacy of
persons are minimized, and report to the House the results of such research and
monitoring;
(8) by undertaking researches on the interaction of technology and the right to privacy,
performs knowledge creation and capacity building works;
(9) To represent Ethiopia, in coordination with the competent Government body, in
international conferences and international organizations concerned with personal data
protection; follows up its execution;
(10) cooperate with supervisory authorities of other countries;
(11) make determination as to whether a third party jurisdiction ensures an appropriate level
of protection comparable with the level of protection established as per this
Proclamation and laws issued to implement this Proclamation;
(12) investigate following legally established investigation procedures and principles
complaints made to it, and require information which are relevant for its investigation
which will enable it to take administrative measures;
(13) keep and maintain Register of data controllers and data processors;
5