Cullen International’s latest research on IoT regulations in seven African countries reveals significant regulatory barriers for cross-border IoT/M2M (internet of things, machine-to-machine) connectivity. While some countries permit permanent roaming under specific conditions, others enforce strict SIM registration, numbering, and authorisation requirements that make market entry challenging for foreign providers.
One of the key findings is that Nigeria effectively prohibits permanent roaming, requiring all SIMs to be registered locally and linked to a National Identification Number (NIN). Egypt and Tunisia mandate prior regulatory approval for permanent roaming agreements, while Kenya enforces strict licensing requirements for foreign providers offering IoT connectivity.
Across the seven African countries analysed, regulatory frameworks differ widely in terms of:
- Authorisation requirements for IoT connectivity – Some countries, such as Egypt and Nigeria, impose strict licensing obligations for foreign IoT providers, while others, including Tunisia and South Africa, offer exemptions for certain services.
- Restrictions on extraterritorial numbering – Egypt and Kenya require regulatory approval for using foreign numbering solutions, while other countries, such as Morocco and South Africa, allow it without specific authorisation.
- Local presence obligations – Algeria, Egypt, and Nigeria require foreign IoT providers to establish a legal entity to operate in the country, significantly impacting business models for global providers.
- SIM card registration obligations – Algeria, Egypt, Kenya, Morocco, Nigeria, and South Africa impose strict registration policies in consumer-facing scenarios, often requiring end user identity verification, compliance with data retention policies and, in some cases, the collection of biometric data.
- Public internet access through IoT subscriptions – Licensing obligations increase when providers offer consumer-facing IoT applications, such as connected cars or smart home solutions, rather than purely machine-to-machine services.
For IoT providers targeting African markets, navigating these regulatory complexities is crucial to ensuring compliance and avoiding operational disruptions. Cullen International’s new benchmarks provide in-depth, actionable insights to help providers understand the diverse regulatory landscapes across Africa and develop effective market entry strategies.
“Find out more” to request more in-depth information!
Clients of our IoT service can “Access the full content”.
Interested in other regions? Check these out:
more news
25 February 26
Protection of minors: overview of national initiatives on banning access to social media
Our latest benchmark shows that an increasing number of European countries are discussing a potential social media ban on children.
23 February 26
The DNA explained: universal service to serve the same goals under a revised approach
Cullen International is issuing a series of analyses on different aspects of the Digital Networks Act (DNA) proposal. This report covers universal service.
20 February 26
Revised Cybersecurity Act (CSA2) - Changes to the EU cybersecurity certification framework
Cullen International published an analysis of the proposed changes to the EU cybersecurity certification framework under the draft Cybersecurity Act 2 (CSA2) delivered by the European Commission on 20 January 2026.