Law / Central African Republic

Central African Republic

3 of 5 named instruments researched to a stage, across three of the six areas of law we track: 3 in force. As of 7 September 2026.

  1. AI law 1
  2. Privacy law 1
  3. Scraping law none researched
  4. Cybersecurity law none researched
  5. Age gating law none researched
  6. News aggregation law 1

in forceenacted but not yet in forceproposedrepealed, withdrawn or blocked

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

AI law1 instrument, 1 in force

Research summary (116 words)

The Central African Republic has no statute on AI-transparency, output-labelling, high-risk-system conformity, training-data provenance, or algorithmic governance; the only located instrument that plausibly reaches AI-generated content is article 111 of the Code Pénal Centrafricain (Loi n° 10.001 du 6 janvier 2010), a criminal ban on pornographic acts involving children that defines pornography by reference to a representation in a work rather than to a real victim, so it is recorded here as an outright-prohibition instrument rather than as an absence.

The African Union's Continental Artificial Intelligence Strategy, adopted July 2024, binds only member-state governments to develop national AI policy and is not recorded as an instrument; no Central African national implementation of it has been located.

AI prohibited practices

Code Pénal Centrafricain, article 111 (pornographie impliquant des enfants)

Code Pénal Centrafricain, Loi n° 10.001 du 6 janvier 2010, art. 111Text of Loi n° 10.001 du 6 janvier 2010 portant Code pénal centrafricain, WIPO Lex legislation record

In force. Binds public and private bodies.

What this law does

Article 111 opens by defining pornography as a complaisant representation of subjects in a literary, artistic, or cinematographic work that offends against good morals, and then makes it an offence for anyone to be guilty of pornographic acts with respect to children, punishable by two to five years' imprisonment and a fine, doubled on repeat conduct.

Because the article defines the underlying concept of pornography by reference to a representation in a work rather than by reference to conduct against a real child, its wording does not on its face exclude a virtual, drawn, or computer-generated depiction of a child from the offence, so a service generating that kind of synthetic content plausibly falls within the ban; no Central African appellate decision construing the point has been located, so this is a reading of the text rather than a settled interpretation.

The Code has no separate provision addressing AI-generated content, algorithmic transparency, or synthetic-media labelling.

What it requires

Privacy law1 instrument, 1 in force

Research summary (155 words)

The Central African Republic's comprehensive personal-data regime is Loi n° 24.001 portant protection des données à caractère personnel, adopted in January 2024, which applies to processing carried out in the country or affecting a person there and treats biometric, genetic, health, political, religious, and other listed categories as sensitive data carrying heightened protection.

The law creates a dedicated data-protection agency with an administrative sanction power capped at 5 percent of a controller's turnover, alongside separate criminal fines and imprisonment for specific offences such as fraudulent collection or unauthorised disclosure. The archived copy of the text does not carry a legible commencement date beyond the law's own statement that it takes effect from its date of promulgation, and no other source confirming that day has been located.

Whether the law arms a private plaintiff with a civil cause of action distinct from the agency's own enforcement powers is not established, so that point is left unrecorded.

Comprehensive regime

Loi n° 24.001 portant protection des données à caractère personnel

Loi n° 24.001 portant protection des données à caractère personnel (janvier 2024)Text of Loi n° 24.001 portant protection des données à caractère personnel

archived copyRead from a public archive copy, not the publisher directly. The publisher does not serve this page to automated readers, so a direct fetch was not an option here; how we access sources. Archived June 22, 2026. Publisher's page: https://www.arcep.cf/fr/images/documents/reglementation/lois/Loi_24_001_portant_protection_des_donnes_a_caractere_personnel.PDF

In force. Binds public and private bodies.

What this law does

Loi n° 24.001 applies to processing of personal data carried out by an establishment in the Central African Republic or by a processor there, whatever the technology, and to processing that produces effects in the country even where the controller is located abroad, subject to carve-outs for purely personal or domestic use and for the temporary, intermediate technical copies an access provider makes to route traffic.

The Act sets fair-processing, purpose-limitation, accuracy, proportionality, security, and retention principles, requires a lawful basis such as consent, contract necessity, a legal obligation, a legitimate interest, or a vital or public-interest ground before personal data is processed, and bars processing sensitive categories, defined to include racial origin, biometric and genetic data, health data, and political, religious, or trade-union information, except on narrow derogations such as the data subject's express consent or a public-interest research purpose.

A minor's data may be processed only with the authorisation of a holder of parental responsibility. Direct marketing by phone, fax, SMS, email, instant message, or social network requires the recipient's prior consent, and the recipient must be able to unsubscribe or change their preferences at any time.

A person may access their own data, object to its use for prospecting without justification, and obtain, when a decision producing legal effects for them rests on automated processing, information letting them understand and contest that mechanism. Every controller must designate a data-protection officer who keeps the processing register, reviews new processing before it starts, liaises with the supervisory agency, and handles data-subject requests.

A transfer of personal data outside the country needs either an adequacy-level destination or one of the Act's specific derogations (informed consent, contract necessity, an important public interest, a legal claim, or a public register), with a lighter regime for transfers to another CEMAC or CEEAC member state and prior notice to the agency for transfers elsewhere.

Breach of the Act draws an administrative sanction (warning, order to stop processing, pecuniary sanction capped at 5 percent of the controller's turnover, or withdrawal of an authorisation, doubled on repeat conduct) from the data-protection agency, and separate criminal penalties, ranging from six months to five years' imprisonment and a fine of FCFA 100,000 to FCFA 10,000,000 depending on the offence, doubled on repeat conduct, for conduct including obstructing the agency, negligent processing without required formalities, fraudulent collection, misusing a file's declared purpose, processing despite a valid objection, unlawful retention, or a disclosure that harms a person's standing or privacy.

No source confirms whether the dedicated supervisory agency has been formally constituted. The law states that it takes effect from its date of promulgation, but no legible day for that promulgation appears in the archived text.

What it requires

News aggregation law1 instrument, 1 in force

Research summary (101 words)

The Central African Republic's domestic copyright statute, Ordonnance n° 85.002 sur le droit d'auteur (1985), has not been read, and its text is not cited here. As an OAPI member state since 1982, the Central African Republic's operative copyright regime is instead the regional Bangui Agreement, whose Annex VII (as revised February 24, 1999, in force since February 28, 2002) applies directly by virtue of membership and carries a press-quotation exception reaching news reproduction.

That regime creates no press-publisher neighbouring right, no mandatory bargaining code, and no hot-news or linking-and-framing rule, and no other Central African source states a text-and-data-mining opt-out.

Snippet reproduction

Bangui Agreement (revised 1999), Annex VII, Free Use for Informatory Purposes

Agreement of February 24, 1999, Revising the Bangui Agreement of March 2, 1977, Annex VII (Literary and Artistic Property), art. 16Text of the Agreement of February 24

In force since 28 February 2002. Binds public and private bodies.

What this law does

The Central African Republic is a member state of the African Intellectual Property Organization (OAPI), and the Bangui Agreement as revised on February 24, 1999 states that it and its annexes apply in their entirety to every State that ratifies or accedes to it, so its Annex VII copyright regime governs literary and artistic property in the Central African Republic directly, without need of separate domestic transposition.

Article 16 of Annex VII permits, without the author's consent and without payment, reproducing in the press, broadcasting, or communicating to the public an economic, political, or religious article already published in a newspaper or periodical, provided the source and author are credited, unless the right of reproduction has been expressly reserved; the same article separately permits reporting on current events and reproducing political speeches and public addresses for informational purposes.

Annex VII creates no press-publisher neighbouring right, no compelled platform-to-publisher bargaining regime, no hot-news or misappropriation doctrine distinct from ordinary copyright, and no machine-readable text-and-data-mining opt-out; it also predates any Central African case law testing whether the press exception reaches a systematic aggregator's reproduction of headlines and snippets, as opposed to a traditional press review.

Note and primary source

This page covers the instruments LexLint has researched to a stage. Instruments named in the corpus but not yet researched are counted in the head and are not listed here. Every entry carries its own primary source on its note page. This is a research index, not legal advice.