The Political unrest in Burundi makes the right to privacy a far less an urgent issue in reform than the need for political stability. Nevertheless, the country acknowledges the inevitable need to reform the legal and regulatory framework for the protection of personal data and privacy. The objective is to minimize the risks posed by government administrative activities and increased use of ICTs on data security and personal privacy. Burundi has made some efforts to secure the cyber space by amending some of the existing laws such as the penal code, the criminal procedure code, telecommunications law and other sensitive sector specific legislation. However, the country is yet to embark into a substantial legal reform to secure personal data in a comprehensive manner. Reforms are still in patchworks despite displayed continued effort to secure personal data and privacy. This chapter provides for an overview of the present legal and regulatory framework for the protection of personal data and privacy in Burundi.