Skip to main content

Seychelles DPA

Data Protection Act 2023

Seychelles' modern data protection law requiring DPO for large-scale processing and recognizing Cross-Border Privacy Rules certification.

Jurisdiction

Seychelles

SC

Enacted

Mar 1, 2023

Effective

Dec 1, 2023

Enforcement

Data Protection Commissioner

Recognizes CBPR scheme for cross-border transfers

Who Must Comply

This law applies to:

  • Data controllers and processors in Seychelles
  • Large-scale data processing operations
  • Cross-border data transfers

Capability triggers:

crossBorderTransfer (increases)
largeScaleProcessing (required)
Required Increases applicability

Who bears obligations:

Safety Provisions

  • Data Protection Officer required for large-scale processing
  • Data Protection Impact Assessment for high-risk processing
  • Breach notification required
  • CBPR (Cross-Border Privacy Rules) scheme recognized
  • Right to object to automated decisions

Enforcement

Enforced by

Data Protection Commissioner

Penalties

Fines and enforcement actions

Quick Facts

Binding
Yes
Mental Health Focus
Yes
Child Safety Focus
No
Algorithmic Scope
Yes

Why It Matters

Seychelles' CBPR recognition creates compliance bridge between African operations and Asia-Pacific markets for AI chatbot platforms.

Recent Developments

Effective December 2023; recognizes CBPR for streamlined Asia-Pacific data transfers

Cite This

APA

Seychelles. (2023). Data Protection Act 2023. Retrieved from https://nope.net/regs/sc-dpa-2023

BibTeX

@misc{sc_dpa_2023,
  title = {Data Protection Act 2023},
  author = {Seychelles},
  year = {2023},
  url = {https://nope.net/regs/sc-dpa-2023}
}