Data Protection Act, 2023, application and processing principles
Data Protection Act, 2023 (Act 24 of 2023), ss. 1-21 (application and data protection principles)
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
In force since 22 December 2023.
A comprehensive regime rule binding public and private bodies.
As of 6 September 2026.
What it requires
- Have a lawful basis for processing personal data, such as informed and explicit consent, contractual necessity, a legal requirement, or a legitimate interest.
- Allow a data subject to withdraw consent at any time, without this affecting the lawfulness of earlier processing.
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
The Data Protection Act, 2023 establishes the Information Commission as the enforcing authority and requires every data controller and processor to process personal data lawfully under one of the grounds the Act lists, including consent, contractual necessity, a legal requirement, vital interests, public interest or legitimate interest. Consent must be informed, free and explicit, and a data subject may withdraw it at any time.
The Act applies to automated and semi-automatic processing generally and to non-automatic processing that forms part of a filing system within Seychelles, and it does not exempt processing of personal data that is otherwise publicly available.
When LexLint raises it
crawls_webtrains_modelsdeploys_chatbotautomated_outreach