Internet & Online Safety - Guinea-Bissau

Guinea-Bissau has no standalone cybercrime legislation. The 1993 Penal Code contains no cybercrime-specific provisions, leaving a significant gap in criminal enforcement for online offences.

Guinea-Bissau has not enacted any data protection or privacy legislation, leaving personal data largely unprotected in the digital environment; it is listed among ECOWAS states that have failed to pass such laws.

There are no laws establishing platform liability, content-moderation obligations, age-verification requirements, or online-safety duties comparable to the EU DSA or UK Online Safety Act.

Law No. 5/2010 established the ARN as the ICT/telecoms regulator responsible for operator licensing and managing the .gw ccTLD, but the law does not address online content safety or cybercrime.

Guinea-Bissau is neither a signatory nor a party to the Council of Europe Budapest Convention on Cybercrime, the primary international treaty for harmonising cybercrime law.

Guinea-Bissau has signed but not ratified the African Union Convention on Cyber Security and Personal Data Protection (Malabo Convention), so it creates no binding domestic obligations on cybercrime or online safety.