Guinea-Bissau
West Africa
Guinea-Bissau has no comprehensive personal data protection law. A June 2026 verification search confirmed that the country has neither dedicated data protection legislation nor related cybercrime or electronic-transactions legislation, and ATLPF holds no Instrument or Regulator record for the jurisdiction. The Constitution of Guinea-Bissau enshrines rights to privacy and personal data protection, and the country is a party to international human-rights instruments, but these provide only high-level, non-operational protection rather than a working framework with data-subject rights, registration, breach notification, or an oversight body. There are reports of a draft data protection law intended to establish a comprehensive framework, but the drafting process has not culminated in enacted legislation. For anyone assessing data-handling obligations in Guinea-Bissau, the practical position is that there is no statutory data protection regime and no supervisory authority; any protection rests on constitutional privacy guarantees and general international commitments rather than a dedicated law.
| Topic | Instruments | Cases | Coverage |
|---|---|---|---|
| Data Protection | 0 | 0 | ○ |
| AI Governance | 0 | 0 | ○ |
| Fintech | 0 | 0 | ○ |
| Cybercrime | 0 | 0 | ○ |
| Digital Rights | 0 | 0 | ○ |
| Platform Liability | 0 | 0 | ○ |
| Telecoms | 0 | 0 | ○ |
● Covered ◐ Partially covered ○ Not yet covered
No comprehensive data protection law, no supervisory authority, and no adjacent cybercrime or electronic-transactions statute. A draft law is reported but unenacted, with no confirmed text on file.