Overview
Ethiopia’s technology, telecommunications, media, and digital services environment is moving toward more granular licensing, stronger consumer and platform regulation, and enforceable privacy and cybersecurity obligations. The sector is undergoing historic transformation—from the liberalisation of telecommunications (ending the state monopoly) to the adoption of Ethiopia’s first comprehensive data protection law.
The core telecom framework is Communications Service Proclamation No. 1148/2019, implemented through Ethiopian Communications Authority (ECA) directives that regulate licensing, interconnection, spectrum, numbering, and compliance. Alongside telecom regulation, Ethiopia has adopted foundational digital laws for electronic transactions and signatures, cybercrime and electronic evidence, and personal data protection, including Personal Data Protection Proclamation No. 1321/2024—a landmark statute that establishes cross-sector privacy obligations for all organisations processing personal data in Ethiopia.
In parallel, intellectual property protection and commercialisation issues are increasingly central for brands, software, content, and technology transfer arrangements. Our practice brings together regulatory, transactional, privacy, cybersecurity, and IP expertise—anchored by our representation of Huawei Technologies PLC and our experience advising on Ethiopia’s largest IT systems contract (a landmark IT systems matter).
What We Do
Telecom and Communications Licensing
Licensing strategy, applications, compliance programmes, regulator engagement, and enforcement response support under Proclamation No. 1148/2019 and ECA directives.
Interconnection, Spectrum, and Equipment Compliance
Inter-operator arrangements, type approval planning, numbering compliance, fee and compliance mapping, and regulator interface management.
Technology Transactions
SaaS and software licensing, cloud and outsourcing agreements, managed services, platform terms, content distribution, and tech-enabled M&A due diligence.
Data Protection and Privacy Compliance
PDPP readiness programmes, controller and processor governance, privacy notices and retention schedules, cross-border data transfer planning, and registration readiness as implementing directives operationalise requirements.
Cybersecurity and Incident Response
Incident triage, evidence preservation, regulator notification strategy (including the 72-hour rule), criminal law exposure mapping under the Computer Crime Proclamation, and post-incident remediation.
Intellectual Property Strategy
Trademark clearance, filing, and portfolio management; copyright and patent support; licensing and enforcement readiness; and infringement response—with Partner Ashenafi Yirga serving as a Licensed Trademark Agent.
Technology Transfer and Registration
Structuring and registration screening for know-how, franchise, trademark licensing, and embedded technology arrangements under the investment administration framework.
High-Impact Risk Themes
Telecom Licensing and Product Compliance
Correct activity categorisation and licence mapping under ECA directives—including class and individual licences—is essential for any entity providing communications services. Interconnection readiness and transparent contractual frameworks are critical for inter-operator dependencies. Equipment compliance planning, including type approval pathways and documentation discipline, prevents market access delays and enforcement action.
Personal Data Protection and Cross-Border Data
The Personal Data Protection Proclamation No. 1321/2024 establishes comprehensive obligations for controllers and processors, including lawful bases for processing, privacy notices, data retention rules, and internal accountability. Registration readiness for controllers and processors should be planned now as implementing directives operationalise requirements. Cross-border data transfers require careful vendor onboarding controls, cloud hosting safeguards, and group data-sharing discipline—particularly relevant for multinationals operating in Ethiopia.
Breach Response and Cyber Incident Exposure
Breach classification and evidence preservation in the first hours is decisive. Controllers must notify the Authority within 72 hours of becoming aware of a personal data breach under the PDPP, with reasons required if notification is delayed. Criminal law exposure under the Computer Crime Proclamation No. 958/2016 and coordination expectations linked to national cybersecurity governance (INSA) add further dimensions to incident management.
IP Ownership and Commercial Leakage
Brand conflicts and bad-faith filings—including agent or competitor filings—are a recurring risk in Ethiopia’s growing market. Unclear licensing scope, royalty mechanics, and quality control in trademark licences create commercial leakage. Software and commissioned works ownership gaps, especially with contractors, agencies, and outsourced developers, require clear contractual allocation. Platform and content disputes are increasingly common where evidence of creation, ownership, and licence scope is weak.
Typical Deliverables
- Licensing and compliance roadmaps with regulator-facing submission packs and implementation checklists.
- Telecom contracts, interconnection and wholesale templates, and consumer terms designed for enforceability and compliance.
- Technology transaction suites: SaaS and cloud contracts, data processing terms, security schedules, SLAs, and limitation of liability structures.
- PDPP compliance packs: data mapping, privacy notices, retention schedules, controller-processor contracts, and training materials.
- Incident response packs: playbooks, breach notification templates, evidence preservation instructions, and board reporting frameworks.
- IP portfolio plans: clearance and filing strategy, renewals calendars, assignment and recordal packs.
- Enforcement packs: cease and desist letters, opposition and cancellation filings, and litigation or arbitration readiness packs.
Why 5A
- Sector Track Record. We represent Huawei Technologies PLC and advised on the landmark TCT vs. Commercial Bank of Ethiopia IT systems matter—Ethiopia’s largest technology dispute. This track record demonstrates our capability in high-value, complex technology matters.
- Regulatory Fluency. We align solutions to proclamations, directives, and ECA practice—not just theoretical legal analysis. Our partners’ government and judicial backgrounds provide practical insight into how regulators assess compliance.
- Contract Enforceability Focus. We localise global templates to Ethiopian evidence, remedies, and enforcement reality—ensuring that technology contracts are not just commercially sound but legally enforceable in Ethiopian courts.
- Licensed IP Agent. Partner Ashenafi Yirga is a Licensed Trademark Agent with the Ethiopian Intellectual Property Office, providing direct filing and prosecution capability for trademark matters.
- Dispute Readiness. When technology, data, or IP matters escalate, we bring the full weight of our disputes practice—led by former Federal Supreme Court judges—to protect client value.
Legal Basis and Key Instruments
- Communications Service Proclamation No. 1148/2019.
- Telecommunications Licensing Directive No. 792/2021 and Telecommunications Interconnection Directive No. 791/2021.
- Personal Data Protection Proclamation No. 1321/2024.
- Electronic Transaction Proclamation No. 1205/2020.
- Computer Crime Proclamation No. 958/2016.
- Information Network Security Agency Re-establishment Proclamation No. 808/2013.
- Media Proclamation No. 1238/2021, as amended by Media (Amendment) Proclamation No. 1374/2025.
- Trademark Registration and Protection Proclamation No. 501/2006.
- Inventions, Minor Inventions and Industrial Designs Proclamation No. 123/1995 and Regulation No. 12/1997.
- Copyright and Neighboring Rights Protection Proclamation No. 410/2004, as amended by Proclamation No. 872/2014.
- Investment Proclamation No. 1180/2020 (technology transfer registration interface).
