The framework
The Data Protection Act (2026) is on the books in Liberia without yet being fully enforceable, a gap between enactment and operation that defines the current compliance picture.
For advertisers the consent posture matters most, and Liberia sits in the opt-in bloc, where tracking and outreach need permission up front.
Key instruments
Data Protection Act (2026)
Liberia enacted its first Data Protection Act in June 2026, signed by President Boakai alongside a Cybercrime Act. Commencement details and the regulator's set-up are still pending.
Marketing and advertising
The new Act sets consent and processing rules whose details await implementation. Most channel decisions here follow from that consent rule.
Cross-border transfers
The Act addresses transfers abroad; implementing rules and a working regulator are still to come.
Enforcement and penalties
The Act provides for sanctions, but no regulator is operating to impose them yet.