The framework
Law No. 24.001 on the Protection of Personal Data is on the books in the Central African Republic without yet being fully enforceable, a gap between enactment and operation that defines the current compliance picture.
For advertisers the consent posture matters most, and the Central African Republic sits in the opt-in bloc, where tracking and outreach need permission up front.
Key instruments
Law No. 24.001 on the Protection of Personal Data
The Central African Republic promulgated Law No. 24.001 on 25 January 2024, in force the same day. The data protection agency it requires, due within a year, has not been created, and the digital economy ministry supervises in the meantime.
Marketing and advertising
Consent-first framework on the francophone African model, in force since January 2024. Most channel decisions here follow from that consent rule.
Cross-border transfers
The law sets conditions for transfers abroad; with no agency in place, the ministry is the only supervisor.
Enforcement and penalties
The law provides for sanctions, but the agency meant to impose them does not yet exist.