Comoros

Comoros has no AI-transparency, output-labeling, or bot-disclosure statute, no AI risk-management or conformity regime, and no dedicated AI strategy document naming a government agency.

The one AI-adjacent duty found binds any person, not only a government body: Chapter 4 of the 2020 Penal Code criminalizes producing, recording, offering, distributing, or publishing an image or a representation of a pornographic or erotic character involving a minor through an information system, a term the same chapter's definitions section uses broadly enough to reach a representation that is not a photograph of a real child, alongside a separate, non-child-specific offense for producing or distributing a counterfeit or manipulated image or video harming a person's dignity through an information system.

A cybersecurity law that might carry further provisions, Loi n°21-012/AU relative à la cybersécurité et à la lutte contre la cybercriminalité (promulgated by Décret n°22-003/PR of 18 January 2022), is unreached: its only located copy on justice.gouv.km is a scanned image PDF that returns no extractable text through the crawler tiers or a web.archive.org snapshot of the same file.

A right against purely automated decision-making that a legacy database entry attributes to Comoros's data-protection law does not appear in the statute's text, and, in any case, would belong under the privacy topic's seam rule rather than here.

Comoros's comprehensive personal-data statute is Loi n°14-029/AU portant protection des données à caractère personnel, deliberated and adopted by the Assemblée de l'Union des Comores in plenary session on 26 June 2014; no later law replacing it was found, and it remains the country's operative data-protection regime.

It applies to any automated or manual processing of personal data without an exception for publicly accessible information, bars collecting or processing data revealing political, philosophical, or religious opinions, trade-union membership, health, or sexual life absent the data subject's express consent, and separately subjects biometric processing used to verify a person's identity to the prior authorization of the Commission Nationale de l'Informatique et des Libertés (CNIL), the independent regulator the law creates.

A controller may transfer personal data abroad only where the receiving state ensures a sufficient level of protection for privacy and fundamental rights, and a person whose rights are harmed may seek civil damages before the competent court in addition to the Commission's own administrative sanctions (warning, pecuniary sanction, injunction to stop processing, withdrawal of authorization, or data lock).

A broad list of offenses in article 64, including obstructing the Commission, processing without required formalities, unauthorized processing of sensitive or national-identification data, fraudulent collection, and disclosure harming a person's privacy, all draw the same criminal penalty under article 65: five to ten years' imprisonment and a fine of 10,000,000 to 35,000,000 Comorian francs, or either alone.

No breach-notification duty to the Commission or to affected individuals was found in the text.

A legacy database entry for this jurisdiction (short_code km-loi-n-001-2021-union-comoros-national-assembl) cites the law under Burkina Faso's own citation (Loi n°001-2021/AN, National Assembly, 2021) while pointing at the very same Comorian PDF; the citation text appears to have been contaminated from Burkina Faso's data-protection law, and a second legacy entry (km-loi-n-21-012-au-du-29-juin-2021-relative-la-p) restates the number of a separate 2021 cybersecurity law under a data-protection title. Neither error changes what the primary statute itself states.

Comoros has no dedicated statute or reported case on scraping, terms-of-service enforceability, or a sui generis database right; the only checked source for a database right, the WIPO Lex jurisdiction profile's complete list of Comoros's main intellectual-property laws (trademarks, copyright, industrial designs, patents), names none.

The applicable computer-misuse regime is Chapter 4 (De la cybercriminalité) of the 2020 Penal Code, which criminalizes fraudulently accessing or remaining within an information system for any person, without an authorization test specific to public web pages, so how it would read against unauthenticated crawling of a public page is unsettled rather than tested.

The country's copyright regime, a 1957 French statute retained without a later replacement, carries no text-and-data-mining exception and predates any digital-reproduction concept, and its record is filed under the aggregation topic (see data/law-topics/aggregation/km.json), which the same statute's snippet and press-review exceptions predominantly serve.

The personal-data reach over scraped data belongs to the privacy topic under the seam rule: Loi n°14-029/AU covers any automated processing of personal data, scraping included, and is recorded there rather than duplicated here.

A separate, specialized cybersecurity law, Loi n°21-012/AU relative à la cybersécurité et à la lutte contre la cybercriminalité, promulgated by Décret n°22-003/PR of 18 January 2022, may also bear on unauthorized access, but its only located copy on justice.gouv.km is a scanned image PDF with no extractable text after two crawler tiers and a web.archive.org snapshot of the same file, so its provisions are unreached rather than confirmed or denied.

Comoros has no social-media minor-access statute, no age-appropriate design code, and no app-store or device-level age-verification duty.

The one gating duty found binds private internet-access providers rather than a platform or a device maker: Chapter 4 of the 2020 Penal Code requires a cybercafé operator to identify users before granting internet access, bars a minor under eighteen from a cybercafé unless accompanied by an adult authorized by a parent or guardian, and limits a minor's access there to exclude pornographic, violent, racist, or degrading websites; it separately requires every internet-access provider to inform subscribers of, and offer, a technical means to filter or select the services their subscribers reach.

A general criminal offense of facilitating a minor's access to pornographic material exists in the same chapter, but binds any person rather than imposing a gating or verification duty on a service, so it is not recorded as a separate instrument here. No case law testing either provision exists.

Comoros has no press-publisher neighbouring right, no compelled platform-to-publisher bargaining regime, no hot-news misappropriation doctrine, no specific linking or framing rule, and no text-and-data-mining opt-out mechanism; none of the six aggregation law families beyond snippet reproduction has a located instrument or reported case.

The operative copyright statute is a 1957 law on literary and artistic property that WIPO Lex still lists as Comoros's current main copyright law, with no later Comorian copyright act found to replace it.

That statute lets an author's short quotations and analyses, justified by a critical, polemical, pedagogical, scientific, or informational character, and press reviews, reproduce a divulged work without the author's consent, provided the author's name and the source are clearly indicated; it was written decades before automated news aggregation existed and does not address a machine-readable reservation, a hyperlink, or framing.