Data Protection and Right to Access Information Bill, 2025 (Sierra Leone)

Sierra Leone does not yet have an enacted personal data protection statute. The country's first dedicated data protection and access to information bill, formally titled the Data Protection and Right to Access Information Bill 2025, has been developed by the Ministry of Information and Civic Education (MoICE) and has undergone a multi-stage stakeholder validation and policy development process. A national data protection policy was developed as a precursor to the legislation. In April 2026, the Cabinet approved the national data protection policy and authorised the Ministry of Information and Civic Education to work with the Attorney-General's office to finalise the Bill for tabling in Parliament. The Cabinet simultaneously authorised the repeal of the existing Right to Access Information Commission Act and its replacement with a new unified statute combining data protection and access to information functions in a single legislative instrument, a model similar to that adopted by The Gambia in 2025. The final national validation of the Bill was concluded in 2025, following which the Bill was submitted to Cabinet. As at June 2026, the Bill had not yet been enacted into law. The proposed legislation is designed to establish clear rules governing the collection, processing, storage, and use of personal data, strengthen citizens' rights to control their personal data, and reinforce the right to public information. The Bill is also intended to align Sierra Leone with international data protection standards relevant to trade and digital cooperation, and to regulate the use of personal information by intelligence and security agencies within a framework balancing national security with the right to privacy. The proposed unified supervisory authority is expected to handle both data protection complaints and access to information requests. No data protection authority has yet been formally established. Reviewers should confirm the current parliamentary status of the Bill with the Ministry of Information and Civic Education and the Parliament of Sierra Leone. Locating and linking the official draft Bill text is a priority reviewer action. All provisions described are subject to parliamentary amendment prior to enactment.

1. 1The bill combines data protection and right to access information into a single legislative instrument, with a single unified supervisory authority proposed to oversee both mandates.
2. 2Cabinet approved the national data protection policy and the Bill's finalisation in April 2026; as at June 2026, the Bill had not been enacted by Parliament.
3. 3The bill is designed to establish data subject rights, obligations on data controllers and processors, and penalties for unauthorised access, unlawful processing, and breach concealment.
4. 4Intelligence and security agency use of personal information is anticipated to be regulated with a national security carve-out balanced against privacy rights.
5. 5Alignment with international data protection standards for trade and digital cooperation is an explicit stated objective of the legislation.
6. 6The proposed supervisory authority would replace the existing Right to Access Information Commission and absorb both access to information and data protection mandates.
7. 7No dedicated data protection authority has yet been established; no official public draft text has been confirmed for this entry.
8. 8Reviewer action required: confirm current parliamentary status, locate official draft text, and update entry upon enactment.