In its simplest sense, data governance refers to the overall management of (personal and non-personal) data to facilitate organizational goals. Data protection, on the other hand, predominantly regulates the management of personal data for the protection of users’ privacy and other fundamental rights and freedoms. The Fourth Industrial Revolution has greatly increased the processing of personal data for business and social purposes in Africa, hence the imminent need to regulate dealings with such personal information for undesirable purpose(s) by setting up relevant legal framework to address. The research analyses the regional legal framework around data protection in Africa in the light of their salient provisions, adequacy, efficiency and enforceability in relation to data governance.