The framework
The Gambia has enacted the Personal Data Protection and Privacy Act, 2025 (Act No. 11 of 2025), but the regime is not yet fully operative.
For advertisers the consent posture matters most, and the Gambia sits in the opt-in bloc, where tracking and outreach need permission up front.
Key instruments
Personal Data Protection and Privacy Act, 2025 (Act No. 11 of 2025)
The Gambia's Personal Data Protection and Privacy Act received presidential assent on 7 November 2025 and hands supervision to the existing Information Commission. Sources differ on whether it has formally commenced, and the Commission's data protection function is still being staffed.
Marketing and advertising
A modern framework built on consent and other lawful bases; guidance and enforcement practice are still taking shape. Most channel decisions here follow from that consent rule.
Cross-border transfers
The Act sets conditions for transfers abroad under the Information Commission's supervision.
Enforcement and penalties
The Act provides for fines and other sanctions; enforcement has yet to begin in earnest.