Seychelles. Comprehensive data protection. Act
Seychelles DPAData Protection Act, 2023 (Act 24 of 2023)
In force
Partly verified
Medium confidence.Authority URL not verified; penalty amounts not found.
§1Summary
- Synopsis
Seychelles' modern data protection law, giving the Information Commission (created under the Access to Information Act) supervisory powers. It largely follows GDPR concepts but is territorial in scope.
- Key themes
- Unique features
No general registration requirement; designated responsible persons' contacts must be public. Scope is territorial rather than GDPR-style extraterritorial.
- SaaS relevance
Relevant where the SaaS provider or its customer processes data in Seychelles (e.g. offshore companies registered there).
§2Obligations
- Extraterritorial
- No
- Breach notification
- Information Commission within 72h; data subjects if high risk
- DPO
- Conditional
- Cross-border transfers
- Adequate level of protection
§3Dates
- Key dates
- Adopted
- In force
- Replaced the unimplemented Data Protection Act 2003; 18-month transition to June 2025
§4Text and authority
- Text
- Authoritative text gazette.sc
- Authority
- Information Commission (Seychelles)
§5Where it applies
- Domestic law of
- Seychelles
§6Sources and verification
- Verification
Medium confidence.
Partly verified
Medium confidence.Authority URL not verified; penalty amounts not found.