Status
In force
Consent model
Opt-in
Primary law
Law 1/2016 on Personal Data Protection
Year
2016
Authority
Authority provided by law; limited operation
Marketing consent
Consent-first on paper.
Transfers
The law ties transfers abroad to authorization by the data protection authority.
Penalties
The law provides for fines.
The framework
The operative statute in Equatorial Guinea is Law 1/2016 on Personal Data Protection, enforced by an authority provided by law.
For media planning that means an opt-in posture, with consent capture built before campaigns launch.
Key instruments
Law 1/2016 on Personal Data Protection
2016 · In force
A 2016 statute exists with minimal visible enforcement.
Marketing and advertising
Consent-first on paper. In practice that means consent before tracking or marketing outreach, documented well enough to show a regulator.
Cross-border transfers
The law ties transfers abroad to authorization by the data protection authority.
Enforcement and penalties
The law provides for fines. How often the authority actually enforces sets the real price.
Cite this page: "Equatorial Guinea Data Privacy Laws." Digital Privacy Regulations, September 28, 2026, https://digitalprivacyregs.com/equatorial-guinea.html. Accessed [date].