It is reported that in Sudan, customers must show passports at the point of sale of sim cards and provide a copy of the passport with a form to fill in. Once the procedure is done, customers may receive the sim card and activate it.
It is reported that, in July 2022, the Technical Committee of the Council of Security and Defense in Sudan ordered service providers to suspend all SIM cards that were not registered with a national ID number.

It is reported that mobile service providers are required to keep records of their customers' information, including full names, full addresses, other phone numbers and place of work. Moreover, the SIM card registration process links phone numbers to users' personal information. It is also reported that under the Telecommunication Law 2018, telecommunication companies must provide customer data to authorities upon request. The Telecommunications Law of 2018 is not available online.

A basic legal framework on intermediary liability for copyright infringement is absent in Sudan's law and jurisprudence.

According to Art. 6 of the Anti-Money Laundering and Combating the Financing of Terrorism Act 2014, financial and non-financial institutions are required to keep records and data relating to customers and transactions and ensure that these records and information are made available to the competent authorities with reasonable speed. The records must be kept for a period of at least five years after the termination of the business relationship or the execution of the incidental transaction, whichever is longer. The article also stipulates that records and data relating to domestic and international transactions, whether executed or attempted, should be kept for at least five years after the transaction, and such records shall be detailed enough to allow the steps of each transaction to be tracked separately.

Sudan does not have a comprehensive regime in place for personal data, but it has the Electronic Transactions Act 2007 as a sectoral regulation. A data protection authority has not yet been appointed.

Sudan has not joined any agreement with binding commitments to open transfers of data across borders.

Sudan has one telecommunications authority: Telecommunications and Postal Regulatory Authority (TPRA). However, it is reported that the decision-making process of this body is not fully independent of the government. The Transitional Sovereignty Council (TSC) separated the TPRA from the Ministry of Defence and placed it under its direct administration. Previously, the TPRA was under the Ministry of Information.

The laws do not mention the limitation to transfer data in a foreign country, but it is reported that de facto there is limitation to transfer data abroad for security reasons, especially for the strategic and sensitive sectors, such as telecom and audio-visual.

Sudan does not mandate functional separation for operators with significant market power (SMP) in the telecom market. However, it is reported that there is an obligation of accounting separation. The relevant law has not been found.

Sudan has not appended the World Trade Organization (WTO) Telecom Reference Paper to its schedule of commitments. In fact, Sudan is not a member of the WTO.

It is reported that there is an obligation for passive infrastructure sharing in Sudan to deliver telecom services to end users. It is practiced in the mobile sector and in the fixed sector based on commercial agreements. However, the relevant law has not been found.

The government owns 30% of the shares of Sudatel, a telecom operator.

Sudan has not signed the World Intellectual Property Organization (WIPO) Performances and Phonograms Treaty.

Sudan lacks a comprehensive regime for the protection of trade secrets.

Sudan has not signed the World Intellectual Property Organization (WIPO) Copyright Treaty.