Democratic Republic of the Congo: passenger data rules and border system records
- Data protection authority
- Not yet created. The digital economy minister said on 12 March 2026 it will be set up soon 2
- Agency that receives API/PNR
- Not published. Resolution 2396 requires states to have airlines send API to national authorities 4
- API/PNR status
- Not confirmed as of 21 October 2026. No published API or PNR system found against the resolution 2396 duties 4
- Biometric collection at entry
- Not confirmed. Contract excerpts as reported mention centralised migration data, not biometrics 3
- Border system contract
- Securiport, build, train, maintain and transfer partnership, US$30 fee, as reported 7 November 2025 3
Data protection law
The Code du numérique was adopted as Ordonnance-loi n° 23/010 of 13 March 2023 1. As reported by Clément Muamba of Actualité.cd and reproduced by OSIRIS on 16 June 2023, the Ministry of Digital Affairs presented the text in Kinshasa on 14 June 2023 with support from the Belgian agency Enabel 1. The Code covers the protection of personal data among other subjects, including e-commerce, electronic signatures and cybersecurity 1.
As reported by Samira Njoya of WeAreTechAfrica and reproduced by OSIRIS on 16 March 2026, the Code sets principles for lawful, transparent and secure processing of personal data 2.
Data protection authority
On 12 March 2026 the Ministry of the Digital Economy launched a national network of data protection officers (DPOs) in Kinshasa 2. Minister Augustin Kibassa Maliba said the network comes before a national data protection authority, which will be set up soon 2. The network aims to help public and private bodies apply the data rules 2.
This page found no record that the authority had been created as of 21 October 2026 2.
The Securiport immigration system contract
As reported by Timothée Manoke of Bankable, republished by Ecofin Agency on 7 November 2025, excerpts of a contract between the government and Securiport were leaked on social media 3. The Ministry of Interior and the Ministry of Transport signed the contract 3.
- Article 38 sets a US$30 fee on every arriving and departing international air passenger 3.
- The fee goes monthly into a joint account run by the government and Securiport, with 85% to Securiport to recover its investment and 15% to the state 3.
- Securiport finances, designs, installs and maintains an integrated security and immigration management system at airports, border posts and ports, including centralised migration data and digital management of passenger flows 3.
- Securiport trains agents named by the two ministries 3.
- At the end of the contract the state takes full ownership of the infrastructure, equipment and software 3.
- The excerpts did not state the contract term 3.
Official response
In the same report, a Ministry of Interior official said the fee is not new and is already included in international ticket prices, collected by airlines 3. The official said the money previously went to several state agencies, including the Direction Générale de Migration (DGM), and part of it now goes to the Securiport contract 3. Several airlines said they already pay embarkation and security charges to Congolese authorities 3.
The government presented the project as a measure against document forgery, identity fraud, radicalised individuals and international crime 3. No official statement explained how Securiport was selected, and the report carried no company statement 3.
This page found no audit office, parliamentary or court finding on the contract as of 21 October 2026 3. The records opened do not state where the migration data is stored or who controls it 3.
Chronology
Common questions
What is the DRC's data protection law?
Ordonnance-loi n° 23/010 of 13 March 2023, the Code du numérique, which covers personal data protection 1.
Does the DRC have a data protection authority?
Not yet. On 12 March 2026 the digital economy minister said one will be set up soon 2.
What is the US$30 airport security fee in the DRC?
A fee on each international air passenger in the Securiport contract, split 85% to Securiport and 15% to the state, as reported on 7 November 2025 3.
Who owns the Securiport system in the DRC?
Under the reported terms, the state takes full ownership of the infrastructure, equipment and software at the end of the contract 3.
Rules and fees change. Check the official site linked above before you apply or pay. Spotted an error? Email [email protected] with the official link.
Sources
- OSIRIS, reproducing Actualité.cd, Clément Muamba: RDC, Eberande Kolongele dévoile les avantages du Code du numérique (16 June 2023)
- OSIRIS, reproducing WeAreTechAfrica, Samira Njoya: La RDC met en place un réseau de responsables de la protection des données (16 March 2026)
- Ecofin Agency, Timothée Manoke: DRC clarifies $30 airport security fee after contract leak (7 November 2025)
- United Nations: Security Council resolution 2396 press release SC/13138 (December 2017)
Related
- Passenger data clauses in border contracts
The terms that decide who holds passenger data in border systems: data location, fees, funding, gateway providers and what official records publish.
- Data sovereignty and border systems
Where border and passenger data must be stored, who can reach it, and what Kenyan, EU, Philippine and UN rules say about hosting and transfer.
- Who oversees passenger data
The bodies that check how governments use API and PNR data: data protection authorities, data protection officers, courts and UN standards.
- UN Security Council Resolution 2396 and ICAO Annex 9
What Resolution 2396 (2017) asks of states on API, PNR, watch lists and biometrics, and how ICAO Annex 9 sets the passenger data standards.
- The Gambia: passenger data rules and border system records
Data protection law status, the Securiport airport contract, National Audit Office findings and official and company responses in The Gambia.
- Rwanda passenger data record
How Rwanda collects API and PNR data under Law No 006/2024, which agency holds it, how long it is kept, and who oversees personal data.