Status
In force
Consent model
Opt-in
Primary law
Law 29-2019 on Personal Data Protection
Year
2019
Authority
Authority provided by law
Marketing consent
Consent-first framework.
Transfers
The law ties transfers abroad to authorization by the data protection authority.
Penalties
The law provides for fines and criminal penalties.
The framework
The operative statute in the Republic of the Congo is Law 29-2019 on Personal Data Protection, enforced by an authority provided by law.
For media planning that means an opt-in posture, with consent capture built before campaigns launch.
Key instruments
Law 29-2019 on Personal Data Protection
2019 · In force
A 2019 law on the Francophone model; institutional practice is still developing.
Marketing and advertising
Consent-first framework. In practice that means consent before tracking or marketing outreach, documented well enough to show a regulator.
Cross-border transfers
The law ties transfers abroad to authorization by the data protection authority.
Enforcement and penalties
The law provides for fines and criminal penalties. How often the authority actually enforces sets the real price.
Cite this page: "Republic of the Congo Data Privacy Laws." Digital Privacy Regulations, September 28, 2026, https://digitalprivacyregs.com/republic-of-the-congo.html. Accessed [date].