Cabo Verde. Comprehensive data protection. Law
Law 133/V/2001Law No. 133/V/2001 on the protection of personal data (as amended by Law 41/VIII/2013 and Law 121/IX/2021)
In force
Partly verified
Medium confidence.Adoption day/month from memory. [Link: CNPD legislation page (incl. amending laws 41/VIII/2013, 121/IX/2021); English by CNPD]
§1Summary
- Synopsis
Cabo Verde's data protection law, based on the Portuguese model and updated in 2021 towards the GDPR. The CNPD is an independent authority handling registrations and authorisations.
- Key themes
- Unique features
Combines Portuguese-style prior registration/authorisation with GDPR-style 72h breach and DPO rules.
- SaaS relevance
SaaS providers serving Cabo Verde must notify breaches to the CNPD within 72h and rely on CNPD adequacy for transfers.
§2Obligations
- Breach notification
- CNPD within 72h
- DPO
- Conditional
- Cross-border transfers
- CNPD adequacy; consent or derogations
- Maximum penalty
- Up to 2 years' imprisonment or 240-day fine
§3Dates
- Key dates
- Adopted
- In force
- Amended 2013 (Law 41/VIII/2013) and 2021 (Law 121/IX/2021, GDPR-style updates); CNPD statute Law 42/VIII/2013
§4Text and authority
- Text
- Authoritative text cnpd.cv
- English text cnpd.cv
- Authority
- Comissão Nacional de Proteção de Dados Pessoais (CNPD)
§5Where it applies
- Domestic law of
- Cabo Verde
§6Sources and verification
- Verification
Medium confidence.
Partly verified
Medium confidence.Adoption day/month from memory. [Link: CNPD legislation page (incl. amending laws 41/VIII/2013, 121/IX/2021); English by CNPD]