African Union validates continental health data governance framework in Ethiopia
The framework seeks to address these risks through shared governance principles while allowing countries to retain oversight of their national health information.
ETHIOPIA—African Union (AU) Member States have validated a continental health data governance framework in Ethiopia to strengthen data protection, promote secure information sharing and support digital health development across the continent.
The African Continental Health Data Governance Framework establishes common principles for the lawful, ethical and secure management of health information while preserving national control over data.
It will guide countries in developing legislation, policies and governance systems to support disease surveillance, public health responses and healthcare delivery.
Strengthening digital health safeguards
Developed through consultations with Member States and other stakeholders since 2025, the framework reflects differences in national laws, institutions and digital health infrastructure.
Its validation comes as African health systems increasingly adopt electronic health records, health information exchanges and artificial intelligence (AI).
These technologies can improve clinical decision making, disease monitoring and resource allocation, particularly as development assistance declines.
However, weak privacy protections, cybersecurity gaps and inadequate legal safeguards expose health systems to data misuse, algorithmic bias and loss of public trust.
The framework seeks to address these risks through shared governance principles while allowing countries to retain oversight of their national health information.
Kenya’s digital health reforms
Kenya provides an example of national efforts to strengthen digital health governance.
The Digital Health Act of 2023 and the Data Protection Act establish legal foundations for managing health information, while the Digital Health Agency is developing systems to facilitate secure data exchange.
These reforms support the shift from paper records to digital services, including more efficient health insurance claims processing.
Mobile money adoption also provides an established foundation for digital transactions within the wider healthcare ecosystem.
“Our experience shows how digital health can improve healthcare delivery. This framework will provide common safeguards and enable countries to share health data securely while retaining control over it,” said Dr Ayub Manya, Senior Deputy Director of Medical Services for Digital Health at Kenya’s Ministry of Health.
Africa CDC Director-General Dr Jean Kaseya said the framework places Member States at the centre of decisions on how health information is managed, protected and shared.
“For too long, Africa’s health data have been fragmented across disconnected systems. This Framework puts governments in the lead,” he said, adding that data ownership and protection are central to health sovereignty.
Implementation and cross-border data sharing
The framework builds on existing AU instruments, including the Malabo Convention on Cyber Security and Personal Data Protection, the AU Data Policy Framework of 2022, and the Digital Transformation Strategy for Africa 2020–2030.
Its proposed federated approach would let countries securely exchange health information across borders without surrendering control of their national systems.
This could strengthen regional outbreak detection and coordination, while giving governments greater oversight of data access and use.
Africa CDC will incorporate agreed amendments and advance the framework through AU policy processes, with consideration anticipated in 2027.
Member States will lead implementation, with technical support from Africa CDC and Transform Health.
Transform Health Chief Executive Officer Mathilde Forslund said effective legislation and regulation are essential to responsible health data collection and the equitable use of AI.
She added that the framework’s validation reflects regional cooperation to protect rights and maintain data sovereignty.
Judith Nguimfack, Head of Africa CDC’s Digital Health and Information Systems Division, said the next priority is to finalise the amendments and prepare countries to implement the framework within their national legal and institutional systems.
Be the first to leave a comment