APD said, in a note, that the decision is part of a recent decision by its board of directors as it found that the operator collected various categories of personal data from customers "without authorization".
According to the APD, Africell collected various categories of personal data, such as the data subject's name, telephone number, address, gender, credit card details, bank details and other payment information, location data and others.
"Taking into account that non-compliance with the obligation to notify is punishable by a fine in an amount equivalent to up to 450,000 dollars, the board of directors indicated the legal circumstances that mitigated Africell's responsibility", refers in the note.
The clear and immediate claim to comply with the Personal Data Protection Law, not having a history related to the commission of violations of data protection rules, not having taken any economic advantage from the situation that occurred and the prompt cooperation with the APD, given the provision of the required information, were the "mitigating factors".
In the Angolan context, "in addition to the consent of the holders of personal data, the entity that processes this information must notify the APD before carrying out a treatment or more treatments that are totally or partially authorized, intended for the pursuit of one or more interconnected purposes", adds the document.
Africell, which holds Angola's fourth unified global telecommunications title, has invested more than 150 million dollars in building a 5G-ready network, whose operations in the Portuguese-speaking country began in April 2022.
