The framework
The Law on the Protection of Personal Data (adopted by the Assembly, June 2014) is on the books in the Comoros without yet being fully enforceable, a gap between enactment and operation that defines the current compliance picture.
For advertisers the consent posture matters most, and the Comoros sits in the opt-in bloc, where tracking and outreach need permission up front.
Key instruments
Law on the Protection of Personal Data (adopted by the Assembly, June 2014)
The Comoros Assembly adopted a personal data protection law in June 2014, and the Ministry of Justice publishes it among the country's laws, but the commission it creates has never been set up. In practice it remains a paper framework.
Marketing and advertising
Consent-first framework on paper; with no commission in place, nothing enforces it. Most channel decisions here follow from that consent rule.
Cross-border transfers
The law addresses transfers abroad, but no commission exists to apply it.
Enforcement and penalties
The law provides for sanctions that no operating body can impose.