Law: Law No. 1/2016 on the Protection of Personal Data (only available in Spanish here) ('the Law')

Regulator: Governing Body for the Protection of Personal Data (not yet operational).

Summary: On July 22, 2011, Law No. 1/2016 on the Protection of Personal Data (only available in Spanish here) (the Data Protection Law) was enacted and entered into effect 20 days after its publication in the Official Gazette. The Data Protection Law establishes general data protection requirements in Equatorial Guinea, including certain data subject rights, and grants citizens the exclusive right to consent to the use of their personal data and to be informed and notified of any use of such data. The Data Protection Law provides for penalties of up to FCFA 15,000,000 (approx. $24,130) for the violation of its provisions. Additionally, the Data Protection Law establishes the Governing Body for the Protection of Personal Data as the data protection authority which, however, is not yet operational.