Data Protection Act, 2023 (Seychelles)

The Data Protection Act, 2023 is Seychelles' modern data protection statute, passed in December 2023 and brought into force, replacing the earlier Data Protection Act (the 2003 statute, which had long been only partially operative). The 2023 Act modernises the legal framework for privacy and personal data protection and establishes a credible supervisory and enforcement architecture. Controllers and processors were given an 18-month transition period, running from 22 December 2023, to bring their activities into conformity. The Act designates the Information Commission as the statutory body responsible for implementing, monitoring, and enforcing its provisions. As an independent oversight body, the Commission can establish additional rules, regulations, and procedures to support implementation; conduct investigations and audits; raise public awareness; impose fines; request preliminary injunctions from the court; issue enforcement notices; and cooperate with foreign supervisory authorities. This represents a marked step up from the pre-2023 position, in which Seychelles had data protection legislation on the books but limited operational enforcement. This entry was created from a June 2026 verification search rather than from a pre-existing ATLPF research file. The detailed substantive provisions, lawful bases, data-subject rights catalogue, sensitive-data categories, breach-notification timelines, and cross-border transfer mechanisms, should be confirmed against the official text, and the primary source URL added. Source language: English.

1. 1Modern data protection statute passed December 2023, replacing the earlier 2003 Act; 18-month compliance transition from 22 December 2023.
2. 2Designates the Information Commission as the statutory supervisory and enforcement authority.
3. 3Commission powers include rule-making, investigations and audits, public awareness, fines, enforcement notices, and court injunctions.
4. 4Enables cooperation with foreign supervisory authorities.
5. 5Represents a significant upgrade from the limited enforcement under the 2003 framework.
6. 6Reviewer action: confirm substantive provisions (rights, transfers, penalties) against the official text and add primary-source URL.