Data protection & privacy laws in Guinea-Bissau (2026)

Guinea-Bissau lacks any comprehensive or sector-specific national data protection legislation. There are no statutory requirements governing the collection, processing, storage, or transfer of personal data at the national level.

The Constitution of Guinea-Bissau protects the right to privacy under Articles 34 and 38, providing a baseline safeguard in the absence of a dedicated data protection statute, but these provisions are not backed by implementing data-protection legislation.

As a member state of ECOWAS, Guinea-Bissau is bound by Supplementary Act A/SA.1/01/10 on Personal Data Protection (2010), which requires member states to enact national data protection laws and establish supervisory authorities. Guinea-Bissau is among a minority of ECOWAS states (along with Togo, The Gambia, Sierra Leone, and Liberia) that had not enacted implementing legislation as of the latest available reports.

Because no national data protection law has been enacted, there is no designated data protection authority or supervisory body in Guinea-Bissau responsible for overseeing personal data processing or receiving complaints.

The Government of Guinea-Bissau has announced its intention to adopt legislation to protect citizens' personal data on digital platforms and has initiated a drafting process, but no formal bill has been tabled or enacted as of 2026.

The only tangentially related legislation, Law No. 5/2010 on the Information Society, addresses telecommunications and internet governance but contains no data protection provisions and does not define personal data or establish processing obligations.