The framework
Law No. 2024/017 of 23 December 2024 on Personal Data Protection is on the books in Cameroon without yet being fully enforceable, a gap between enactment and operation that defines the current compliance picture.
That puts Cameroon in the global opt-in majority, where permission comes before processing and marketing waits for consent.
Key instruments
Law No. 2024/017 of 23 December 2024 on Personal Data Protection
Central Africa's largest economy has a comprehensive data protection law in force. Law No. 2024/017, enacted 23 December 2024, took full effect on 23 June 2026 when its 18-month transition ended. The supervisory authority still awaits the presidential decree that creates it, so the obligations apply without a regulator to police them.
Marketing and advertising
Consent-first framework with data protection officer duties; its obligations have applied since the 18-month transition ended on 23 June 2026. That single sentence decides most channel plans here.
Cross-border transfers
The law sets conditions for transfers abroad, but the authority meant to supervise them has not been set up.
Enforcement and penalties
The law provides for sanctions, but no authority is yet in place to impose them.