Gabon. Comprehensive data protection. Law
Law 001/2011Law No. 001/2011 of 25 September 2011 on the protection of personal data, as amended by Law No. 025/2023 of 9 July 2023
In force
Partly verified
Medium confidence.Day/month of 2011 law from memory. [Link: APDPVP-hosted JO of amending Law 025/2023; 2011 original: dataprotection.africa/wp-content/uploads/2022/09/Gabon_DPA.pdf]
§1Summary
- Synopsis
Gabon's data protection law, modernised in 2023 to add GDPR-like DPO, breach and accountability requirements. It retains notification and prior authorisation formalities.
- Key themes
- Unique features
2023 amendment brought mandatory DPOs and breach notification into a francophone declaration-based regime; non-encrypted health investigation data generally may not leave Gabon.
- SaaS relevance
SaaS processing Gabonese data must support breach notification to APDPVP and transfer restrictions.
§2Obligations
- Breach notification
- APDPVP without delay; individuals if high risk
- DPO
- Conditional
- Cross-border transfers
- Adequacy (list pending); derogations
§3Dates
- Key dates
- Adopted
- In force
- Substantially amended by Law 025/2023 (2023-07-09), adding DPO and breach rules
§4Text and authority
- Text
- Authoritative text apdpvp.ga
- Authority
- Autorité de Protection des Données Personnelles et de la Vie Privée (APDPVP), formerly CNPDCP
§5Where it applies
- Domestic law of
- Gabon
§6Sources and verification
- Sources consulted
- Verification
Medium confidence.
Partly verified
Medium confidence.Day/month of 2011 law from memory. [Link: APDPVP-hosted JO of amending Law 025/2023; 2011 original: dataprotection.africa/wp-content/uploads/2022/09/Gabon_DPA.pdf]