Cullen International’s latest research on IoT regulations in seven African countries reveals significant regulatory barriers for cross-border IoT/M2M (internet of things, machine-to-machine) connectivity. While some countries permit permanent roaming under specific conditions, others enforce strict SIM registration, numbering, and authorisation requirements that make market entry challenging for foreign providers.
One of the key findings is that Nigeria effectively prohibits permanent roaming, requiring all SIMs to be registered locally and linked to a National Identification Number (NIN). Egypt and Tunisia mandate prior regulatory approval for permanent roaming agreements, while Kenya enforces strict licensing requirements for foreign providers offering IoT connectivity.
Across the seven African countries analysed, regulatory frameworks differ widely in terms of:
- Authorisation requirements for IoT connectivity – Some countries, such as Egypt and Nigeria, impose strict licensing obligations for foreign IoT providers, while others, including Tunisia and South Africa, offer exemptions for certain services.
- Restrictions on extraterritorial numbering – Egypt and Kenya require regulatory approval for using foreign numbering solutions, while other countries, such as Morocco and South Africa, allow it without specific authorisation.
- Local presence obligations – Algeria, Egypt, and Nigeria require foreign IoT providers to establish a legal entity to operate in the country, significantly impacting business models for global providers.
- SIM card registration obligations – Algeria, Egypt, Kenya, Morocco, Nigeria, and South Africa impose strict registration policies in consumer-facing scenarios, often requiring end user identity verification, compliance with data retention policies and, in some cases, the collection of biometric data.
- Public internet access through IoT subscriptions – Licensing obligations increase when providers offer consumer-facing IoT applications, such as connected cars or smart home solutions, rather than purely machine-to-machine services.
For IoT providers targeting African markets, navigating these regulatory complexities is crucial to ensuring compliance and avoiding operational disruptions. Cullen International’s new benchmarks provide in-depth, actionable insights to help providers understand the diverse regulatory landscapes across Africa and develop effective market entry strategies.
“Find out more” to request more in-depth information!
Clients of our IoT service can “Access the full content”.
Interested in other regions? Check these out:
more news
01 June 26
Privacy in the digital age
Our latest benchmark compares data protection laws across 14 jurisdictions. It covers recent legal updates, lawful bases for processing personal data, and extraterritorial applicability. It also examines privacy rules for location, biometric, and children’s data, as well as enforcement practices involving these data types and big tech groups.
01 June 26
Fewer European countries offer local loop unbundling over copper
29 May 26
How are EU member states transposing NIS2?
Our latest benchmark tracks the progress of the Directive on measures for a high common level of cybersecurity across the EU (NIS2) transposition in the 27 EU member states.