🇸🇹 Sao Tome and Principe Data Privacy Laws

The framework

The operative statute in Sao Tome and Principe is Law 3/2016 on Personal Data Protection, enforced by an authority provided by law.

For media planning that means an opt-in posture, with consent capture built before campaigns launch.

Key instruments

Marketing and advertising

Consent-first framework on the Lusophone model. Treat the consent note above as the planning rule; the penalty line below is what mispricing it costs.

Cross-border transfers

The law ties transfers abroad to authorization by the data protection authority.

Enforcement and penalties

The law provides for fines. How often the authority actually enforces sets the real price.