Home › Countries

Insurance brokers on WhatsApp: what changes in each country

Every market has its regulator, its data-protection law and its premium payment habits (debit orders, mobile money, cash). These pages describe what changes for a brokerage that reminds, renews and services clients on WhatsApp in each country.

By FCB.ai, ORIS editorial teamUpdated on

How to read these pages

Before using WhatsApp with clients in a given country, a brokerage has to answer three questions. Every country page answers them in the same order, with a link to the official website of the authority concerned:

  1. Who licenses and supervises intermediaries? The FSCA in South Africa, NAMFISA in Namibia, NBFIRA in Botswana, the IRA in Kenya, the FCA in the UK, ORIAS and the ACPR in France, and in the CIMA zone each state's insurance directorate under the regional CIMA supervisor. That framework sets licensing, the duty of advice and record-keeping, conversations included.
  2. Which law protects client data, and who enforces it? It decides the lawful basis for each message (the contract for a premium reminder, consent for marketing) and how long records are kept. Some countries still have no general data protection act in force, such as Namibia: the page says so and describes the prudent practice.
  3. How are premiums paid? Debit order, direct debit, mobile money or cash: this decides what reminders say and where lapse risk sits. In the CIMA zone, article 13 of the Code also requires the premium to be paid before cover starts.

Where to start: South Africa, ORIS's home market, and its neighbours Namibia and Botswana; Kenya in East Africa; in Europe, the United Kingdom and France; in the CIMA zone, Senegal, Côte d'Ivoire and Cameroon.

Rules change: new data protection laws in Botswana (2024) and Cameroon (2024), FIMA in force in Namibia (2026). Every page shows its update date; always check the text in force with the regulator before deciding.

Where to start: a brokerage's core journeys

North Africa

CountrySupervisor (official site)Insurance frameworkData protection
AlgeriaCSA · Commission de Supervision des Assurances (Ministère des Finances)Ordinance 95-07 of 25 January 1995 (as amended by Law 06-04)ANPDP (Autorité Nationale de Protection des Données à caractère Personnel)
MoroccoACAPS · Autorité de Contrôle des Assurances et de la Prévoyance SocialeLaw 17-99 (Insurance Code)CNDP (Commission Nationale de contrôle de la protection des Données à caractère Personnel)
TunisiaCGA · Comité Général des Assurances (Ministère des Finances)Insurance Code (Law 92-24 of 9 March 1992)INPDP (Instance Nationale de Protection des Données Personnelles)

West Africa

CountrySupervisor (official site)Insurance frameworkData protection
BeninDA · Direction des Assurances (DGAE, Ministère de l'Économie et des Finances)CIMA Insurance CodeAPDP (Autorité de Protection des Données Personnelles)
Burkina FasoDA · Direction des Assurances (DGTCP, Ministère de l'Économie et des Finances)CIMA Insurance Code (+ compulsory local insurance of imports)CIL (Commission de l'Informatique et des Libertés)
Côte d'IvoireDA · Direction des Assurances (Ministère de l'Économie, des Finances et du Budget)CIMA Insurance CodeARTCI (Autorité de Régulation des Télécommunications/TIC)
GhanaNIC · National Insurance CommissionInsurance Act 2021 (Act 1061)Data Protection Commission (DPC)
GuineaBCRG · Banque Centrale de la République de Guinée (autorité de tutelle des assurances)Insurance Code (Law L/2016/034/AN)APDP prévue par la loi, en cours d'installation
MaliDGTCP · Division des Assurances (DGTCP, Ministère de l'Économie et des Finances)CIMA Insurance CodeAPDP (Autorité de Protection des Données à caractère Personnel)
NigerDCA · Direction du Contrôle des Assurances (Ministère de l'Économie et des Finances)CIMA Insurance CodeHAPDP (Haute Autorité de Protection des Données à caractère Personnel)
NigeriaNAICOM · National Insurance CommissionNigerian Insurance Industry Reform Act 2025 (NIIRA), NCRIB Act 2003Nigeria Data Protection Commission (NDPC)
SenegalDA · Direction des Assurances (Ministère de l'Économie, des Finances et du Plan)CIMA Insurance Code (+ Law 83-47 on import cargo insurance)CDP (Commission de protection des Données Personnelles)
TogoDA · Direction des Assurances (Ministère des Finances et du Budget)CIMA Insurance CodeIPDCP (Instance de Protection des Données à Caractère Personnel)

Central Africa

CountrySupervisor (official site)Insurance frameworkData protection
CameroonDNA · Direction Nationale des Assurances (Ministère des Finances)CIMA Insurance CodeAPDP prévue par la loi, en cours d'installation
ChadDNA · Direction Nationale des Assurances (Ministère des Finances et du Budget)CIMA Insurance CodeANSICE (Agence Nationale de Sécurité Informatique et de Certification Électronique)
Congo-BrazzavilleDGIFN · Direction des Assurances (DGIFN, Ministère des Finances, du Budget et du Portefeuille public)CIMA Insurance CodeCNPD prévue par la loi, installation en cours
Democratic Republic of the CongoARCA · Autorité de Régulation et de Contrôle des AssurancesLaw 15/005 of 17 March 2015 (Insurance Code)APD prévue par le Code du numérique (intérim assuré par l'ARPTC)
GabonDNA · Direction Nationale des Assurances (Ministère de l'Économie et des Finances)CIMA Insurance CodeAPDPVP (ex-CNPDCP)

East Africa

CountrySupervisor (official site)Insurance frameworkData protection
KenyaIRA · Insurance Regulatory AuthorityInsurance Act (Cap. 487), Insurance Regulations and Insurance (Market Conduct) Guidelines 2022Office of the Data Protection Commissioner (ODPC)
RwandaBNR · National Bank of RwandaLaw No. 030/2021 of 30 June 2021 governing the organisation of insurance businessNational Cyber Security Authority (NCSA) — Data Protection and Privacy Office
TanzaniaTIRA · Tanzania Insurance Regulatory AuthorityInsurance Act (Cap. 394, R.E. 2023), Insurance Regulations 2009, Bancassurance Regulations 2019, Microinsurance Regulations 2013Personal Data Protection Commission (PDPC)
UgandaIRA · Insurance Regulatory Authority of UgandaInsurance Act 2017, Insurance (Intermediaries) Regulations 2021, Insurance (Bancassurance) Regulations 2017Personal Data Protection Office (PDPO, au sein de NITA-U)

Southern Africa

CountrySupervisor (official site)Insurance frameworkData protection
AngolaARSEG · Agência Angolana de Regulação e Supervisão de SegurosLaw 1/00 (General Insurance Activity Law) and Law 6/24 of 3 June 2024 on insurance mediation and brokingAgência de Protecção de Dados (APD)
BotswanaNBFIRA · Non-Bank Financial Institutions Regulatory AuthorityInsurance Industry Act 2015 and Regulations (in force since 17 May 2019), NBFIRA Act 2006Information and Data Protection Commission (IDPC)
EswatiniFSRA · Financial Services Regulatory AuthorityInsurance Act 2005, FSRA Act 2010, Reinsurance Act 2023Eswatini Data Protection Authority (EDPA, au sein de l'ESCCOM)
LesothoCBL · Central Bank of Lesotho (Insurance Supervision)Insurance Act 2014 (Act 12 of 2014) and Insurance (Licensing of Insurance Intermediaries) RegulationsData Protection Commission (prévue par la loi, pas encore opérationnelle / provided for, not yet operational)
MozambiqueISSM · Instituto de Supervisão de Seguros de MoçambiqueRegime Jurídico dos Seguros (Decree-Law 1/2010, replaced by a new regime approved in 2026 under Law 6/2025)Aucune autorité à ce jour (ANPD proposée) / no authority yet (ANPD proposed)
NamibiaNAMFISA · Namibia Financial Institutions Supervisory AuthorityFinancial Institutions and Markets Act 2 of 2021 (FIMA) and NAMFISA Act 3 of 2021, in force since 1 May 2026Aucune autorité désignée à ce jour / no authority designated yet
South AfricaFSCA · Financial Sector Conduct AuthorityFAIS Act 37 of 2002, Insurance Act 18 of 2017, Policyholder Protection Rules (COFI Bill tabled in Parliament in 2026)Information Regulator (South Africa)
ZambiaPIA · Pensions and Insurance AuthorityInsurance Act No. 38 of 2021 and Insurance (General) Regulations 2022Office of the Data Protection Commissioner (OPDC)
ZimbabweIPEC · Insurance and Pensions CommissionInsurance Act [Chapter 24:07], IPEC Act [Chapter 24:21] as amended by the IPEC Amendment Act 2026, SI 44 of 2026POTRAZ (Postal and Telecommunications Regulatory Authority of Zimbabwe), autorité de protection des données

Indian Ocean

CountrySupervisor (official site)Insurance frameworkData protection
MadagascarCSBF · Commission de Supervision Bancaire et FinancièreLaw 2020-005 on insuranceCMIL prévue par la loi, en cours d'installation
MauritiusFSC · Financial Services Commission MauritiusInsurance Act 2005, Financial Services Act 2007, FSC rules on intermediariesData Protection Office (DPO)

Western Europe

CountrySupervisor (official site)Insurance frameworkData protection
BelgiumFSMA · Autorité des services et marchés financiersInsurance Act of 4 April 2014 (IDD transposed in 2018)APD / GBA (Autorité de protection des données)
FranceACPR · Autorité de contrôle prudentiel et de résolutionInsurance Code (Book V, IDD transposed by Ordinance 2018-361)CNIL (Commission nationale de l'informatique et des libertés)
LuxembourgCAA · Commissariat aux AssurancesAmended Law of 7 December 2015 on the insurance sectorCNPD (Commission nationale pour la protection des données)
SwitzerlandFINMA · Autorité fédérale de surveillance des marchés financiersInsurance Supervision Act (ISA, revised 1 January 2024) and Insurance Contract Act (ICA)PFPDT / FDPIC (Préposé fédéral à la protection des données et à la transparence)
Book a demo