Law No. 025/2023, interconnection and cross-border transfer of personal data

Loi n°025/2023, articles 168 à 174 (interconnexion et transfert transfrontalier de données)

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force since 15 July 2023.

A cross border transfer rule binding public and private bodies.

As of 19 September 2026.

What it requires

Obtain the APDPVP's prior authorization before transferring personal data to another State; consult the list of States the Authority has found to offer a sufficient level of protection.
Absent that authorization, transfer only where the data subject has expressly consented to the specific transfer and it is necessary to safeguard their life or the public interest, to establish, exercise or defend a legal claim, to consult a public register, or to perform or negotiate a contract with or for the data subject's benefit, or where the APDPVP or a decree has found the processing otherwise offers a sufficient level of protection, such as through contractual clauses or binding internal rules.
Expect the APDPVP to suspend or cancel a transfer, on a receipt served to that effect, once it finds the destination State does not offer a sufficient level of protection, and expect the suspension to lift once it finds that level established.
Obtain the APDPVP's authorization before interconnecting your data systems with those of another public-service body pursuing a different public interest, or with another private party's systems pursuing a different main purpose.

What it reaches

Obligation class

Transfer, Licensing

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

Article 171 conditions any transfer of personal data to another State on the APDPVP's prior authorization, which the Authority grants only once it is satisfied the destination State assures a sufficient level of protection, judged by that State's rules, its security measures, and the processing's own purpose, duration, nature, origin and destination; the APDPVP publishes the list of States it has found to offer a sufficient level of protection.

Article 173 lets a controller transfer to a State that does not meet article 171's standard only where the data subject has expressly consented to that specific transfer and it is necessary to safeguard the person's life or the public interest, to establish, exercise or defend a legal claim, to consult a public register, or to perform or negotiate a contract with or for the person's benefit, or otherwise by a decision of the APDPVP or a decree finding the processing offers a sufficient level of protection through means such as contractual clauses or binding internal rules.

Article 174 has the APDPVP issue a receipt barring a transfer once it finds the destination State's protection insufficient, informing officials and the public without delay, and enjoining a controller to suspend or cancel a transfer a pending declaration reveals; it lifts the suspension once it finds the State's protection now sufficient.

Articles 168 to 170 separately condition on the APDPVP's authorization any interconnection of information systems belonging to different public-service bodies pursuing different public interests, or to different private parties pursuing different main purposes, and record every interconnection request and authorization in the public register of processing activities.

When LexLint raises it

crawls_web
trains_models
deploys_chatbot
automated_outreach
distributes_software_product

Read the law

Loi n°025/2023 du 9 juillet 2023 portant modification de la loi n°001/2011 du 25 septembre 2011 relative à la protection des données à…
Loi n°025/2023 du 9 juillet 2023 portant modification de la loi n°001/2011 du 25 septembre 2011 relative à la protection des données à caractère personnel, Journal Officiel de la République Gabonaise

archived copy

Read from a public archive copy, not the publisher directly. The publisher does not serve this page to automated readers, so a direct fetch was not an option here; how we access sources. Archived 2025. Publisher's page: https://journal-officiel.ga/20085-025-2023-/

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app