TYPE: Normal
----- BODY -----
Fijishi Jurisdiction Index 2026 · Entry CM · Published 12 October 2026
At a glance
| Jurisdiction tier | Tier D - Not yet specified. No binding instrument that applies to insurers' own use of AI, and no issued regulator document addressed to this insurance market, sets out rules or expectations for AI. |
| Question to | the regional insurance supervisor and the data protection authority - rights against solely automated decisions |
| Band for this question | Contained |
| Rules reach | Insurers: directly · Reinsurers: directly · Intermediaries: not stated |
| Last verified | [actual date of the launch-window check] |
Insurers and reinsurers in Cameroon are regulated regionally through CIMA, the Conférence Interafricaine des Marchés d'Assurances. A CIMA regulation adopted on 17 December 2024 requires them to run an automated system for their insurance business and says processes should be automated as far as possible (Article 15). It does not name AI.
Cameroon's Law No. 2024/017 of 23 December 2024 on personal data protection gives a person the right to object to decisions based exclusively on automated processing, and to human intervention (Article 44). Organisations had 18 months from promulgation to comply.
Who these rules reach
- Insurers: directly. The CIMA regulation is on the security and governance of information technology "des entreprises d'assurances et de réassurance" (of insurance and reinsurance companies). Article 44 of Law No. 2024/017 applies to any decision based exclusively on automated processing, whoever makes it.
- Reinsurers: directly, under the same CIMA regulation title.
- Intermediaries: not stated.
This band describes how far the published record answers the question put to the regional insurance supervisor and the data protection authority. It is not a finding that either authority, or any firm it oversees, has fallen short of any rule.
Why the question goes to the regional insurance supervisor and the data protection authority: No Cameroonian insurer's own published account of AI in underwriting, claims or pricing was found, so the question goes to the authorities.
The question
In briefIn December 2024 the CIMA Council of Ministers adopted a regulation on the security and governance of information technology for insurance and reinsurance companies in its member states, including Cameroon. It requires them to run an automated system covering, among other things, the setting of product tariffs and claims-opening scales, and says that all processes should be automated as far as possible (Article 15). Cameroon's Law No. 2024/017 of 23 December 2024 on personal data protection gives a person the right to object to any decision based exclusively on automated processing of their personal data, including profiling, and the rights to obtain human intervention, express their view and contest the decision (Article 44). It gave organisations 18 months from promulgation to comply (Article 73). CIMA's regulation on digital distribution of insurance lists the authorities in charge of personal data protection among the "other supervisory authorities". Where an insurer's automated system, including any AI model, decides a Cameroonian policyholder's cover or claim, is it for CIMA's regional supervisory bodies and Cameroon's national insurance directorate to check that the Article 44 rights were respected, or for the personal data protection authority created by the 2024 law?
Why this band: No company's own account could be tested, so the question rests on the regional regulation and the national statute.The regional insurance regulator requires insurers in Cameroon to automate their processes as far as possible, and Cameroon's 2024 data protection law gives people the right to object to fully automated decisions and to have a human review them. The regional rules list data protection authorities among the other supervisors. The two regimes leave open who checks those rights when an insurer's automated or AI system decides a claim or cover. We found no regulator or company publication documenting AI use in underwriting, claims or pricing in Cameroon.
3. What the open question means for firms in Cameroon
Until the authorities answer, an insurer in Cameroon whose automated system decides a person's cover or claim has no published statement saying whether the regional insurance supervisors or the data protection authority checks that the Article 44 rights were respected. This entry gives no band to any firm.
4. What this entry does not establish
- The CIMA regulation's publication date in the CIMA official journal, on which its entry into force depends.
- Whether the data protection authority created by the 2024 law is operating.
- Whether any insurer in Cameroon uses AI in these decisions. This entry says nothing either way.
- Here CIMA is the Conférence Interafricaine des Marchés d'Assurances. The Cayman Islands entry (KY) refers to the Cayman Islands Monetary Authority, a different body.
- Date to be confirmed: the end of the 24-month transition under Article 28 of the CIMA regulation.
Sources
- CIMA, Council of Ministers, Règlement relatif à la sécurité et à la gouvernance des technologies de l'information et de la communication … des entreprises d'assurances et de réassurance, Règlement N°010/CIMA/PCMA/CE/SG/2024, "Fait à Abidjan, le 17 décembre 2024" (printed). Regional regulation, French. cima-afrique.org PDF
- CIMA, Règlement portant sur la distribution et la gestion du contrat d'assurance par voie numérique/électronique, 2024. Regional regulation, French. cima-afrique.org PDF
- Loi n° 2024/017 du 23 décembre 2024 relative à la protection des données à caractère personnel au Cameroun. Statute, French. prc.cm
None share a law or regulator with this entry.
________________________________________
Commercial relationship with any party named here: None · Right of reply: indexreport.protocol@fijishi.com; with the sender's agreement, replies are published in full below the entry, dated · Cite as: Fijishi Jurisdiction Index 2026, Entry CM · Corrections: none.