Law / Sao Tome and Principe

Sao Tome and Principe

4 of 7 named instruments researched to a stage, across three of the six areas of law we track: 4 in force. As of 7 September 2026.

  1. AI law none researched
  2. Privacy law 1
  3. Scraping law 2
  4. Cybersecurity law none researched
  5. Age gating law none researched
  6. News aggregation law 1

in forceenacted but not yet in forceproposedrepealed, withdrawn or blocked

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

Privacy law1 instrument, 1 in force

Research summary (180 words)

São Tomé and Príncipe's comprehensive personal-data statute is Lei n.º 03/2016, adopted by the National Assembly on 15 February 2016 and promulgated by the President on 18 March 2016, which any controller processing personal data of a person in the country, or using means located there, must observe.

Enforcement sits with the National Agency for the Protection of Personal Data (NAPPD, commonly cited as the ANPDP), which authorizes sensitive-data processing, receives the mandatory eight-day pre-processing notification, and rules on cross-border transfers to a country lacking an adequate level of protection.

The Law's own commencement clause defers to general law without stating a day, so no specific date is recorded here, though the statute has stood as the country's operative data-protection framework since its 2016 promulgation, with a dedicated organic law on the Agency's structure (Lei n.º 07/2017) following in 2017.

Enforcement combines an administrative fine track, tiered by the violator's legal form and doubled for a breach involving data the Law subjects to prior checking, with a separate criminal track carrying imprisonment or a day-fine, also doubled for sensitive-category data.

Comprehensive regime

Lei n.º 03/2016, Protecção de Dados Pessoais

Lei n.º 03/2016, de 15 de Fevereiro de 2016, sobre a Protecção de Dados PessoaisLei n.º 03/2016 sobre a Protecção de Dados Pessoais, reproduced by the Network of African Data Protection Authorities (NADPA-RAPDP)

archived copyRead from a public archive copy, not the publisher directly. The publisher does not serve this page to automated readers, so a direct fetch was not an option here; how we access sources. Archived 2023. Publisher's page: https://www.nadpa-rapdp.org/sites/default/files/2020-11/Law_3_2016_protection_of_personal_data.pdf

In force. Binds public and private bodies.

What this law does

Lei n.º 03/2016 sets São Tomé and Príncipe's general rules for processing personal data by automated or manual means, applying to a controller established in the country, one targeting activities there, one using means located there, or one whose processing engages São Toméan private or public international law.

Processing needs the holder's unequivocal authorization or one of the Law's specific grounds: contract performance, a legal obligation, the holder's vital interests, a public-interest mission, or the controller's own legitimate interest balanced against the holder's rights.

A narrower list of sensitive categories, philosophical or political belief, trade-union or religious affiliation, racial or ethnic origin, private life, health or sex life including genetic data, needs the holder's explicit authorization, a specific legal provision, or NAPPD authorization for an important public interest; biometric identifiers as such are not named among these categories.

A controller or its representative must notify the National Agency for the Protection of Personal Data (NAPPD) in writing at least eight days before starting a wholly or partly automated processing operation, and obtain NAPPD's prior authorization before processing sensitive data, credit or solvency data, interconnecting personal-data files, or repurposing data collected for another end.

Chapter III gives the data holder a right to information at collection and a right of access and rectification. A transfer of personal data outside the country needs the destination legal order to ensure an adequate level of protection, as NAPPD assesses it, unless a derogation applies (contract necessity, an important public interest, the holder's vital interests, or a public register open to consultation) or NAPPD authorizes the transfer on the strength of adequate contractual safeguards. The Law's own final provision defers its entry into force to general law without stating a day.

What it requires

Scraping law2 instruments, 2 in force

Research summary (205 words)

São Tomé and Príncipe's copyright statute, Decree-Law No. 02/2017 (Copyright and Related Rights Code), protects a compilation, anthology, or systematic collection only where the choice or arrangement of its contents is itself an intellectual creation, names no database as such, and gives the country no separate sui generis database right; news of the day and reports of events disclosed as simple information are excluded from copyright protection altogether.

The same Code exempts from an author's consent a temporary or transient reproduction that is an integral part of a technological transmission process and has no independent economic significance, together with a set of quotation, teaching, and library exceptions.

No statute or reported case located addresses computer-misuse or unauthorized-access liability for reading a public, unauthenticated page, terms-of-service enforceability, or a scraping-specific unfair-competition or trespass doctrine, and none assigns legal weight to a robots.txt directive or states an AI-training-specific rule; a computer-misuse or cybercrime statute, cited elsewhere as Lei n.º 15/2017 of 6 October 2017, exists, but no primary text of it has been located through the sources available, so its provisions are not addressed here.

São Tomé and Príncipe's data-protection statute, Lei n.º 03/2016, separately reaches personal data scraped from a public page (see the privacy topic).

Copyright and text and data mining (TDM)

Decreto-Lei n.º 02/2017, utilizações livres e reprodução técnica

Decreto-Lei n.º 02/2017, arts. 75-76 e 197, de 19 de Abril de 2017, Código do Direito de Autor e dos Direitos ConexosDecreto-Lei n.º 02/2017 de 19 de Abril de 2017, Diário da República n.º 47 de 17 de Abril de 2017

archived copyRead from a public archive copy, not the publisher directly. The publisher does not serve this page to automated readers, so a direct fetch was not an option here; how we access sources. Archived 2023. Publisher's page: https://wipolex-res.wipo.int/edocs/lexdocs/laws/pt/st/st007pt.pdf

In force since 17 April 2017. Binds public and private bodies.

What this law does

Article 75(1) excludes from the reproduction right a temporary act of reproduction that is transient or accessory, is an integral and essential part of a technological process, and whose sole purpose is to enable a network transmission between third parties by an intermediary or a lawful use with no independent economic significance; browsing and temporary storage that enable a transmission system's effective functioning are lawful on the same terms, provided the intermediary does not modify the transmission's content or interfere with a technology's lawful use as recognized by market practice.

Article 75(2) permits, without the author's consent, a regular selection of periodical press articles as a press review. It also permits the fixation or communication of short excerpts from a work when their use in reporting a current event is justified for information purposes. It further permits inserting citations or summaries of another's work in support of one's own views or for criticism, discussion, or teaching.

It also permits reproducing or communicating an already-accessible current-affairs article on an economic, political, or religious topic, unless its reproduction right has been expressly reserved. Article 76 conditions this free use on naming the author and publisher where possible, and on paying equitable remuneration to the author and publisher in the cases the article specifies.

No text-and-data-mining-specific exception, and no AI-training-specific rule, is stated separately from this general free-use framework, and the Code predates that concept. Infringing outside these exceptions is punished under article 197.

What it requires

Database right

Decreto-Lei n.º 02/2017, protecção de compilações e exclusão das notícias do dia

Decreto-Lei n.º 02/2017, arts. 3 e 7, de 19 de Abril de 2017, Código do Direito de Autor e dos Direitos ConexosDecreto-Lei n.º 02/2017 de 19 de Abril de 2017, Diário da República n.º 47 de 17 de Abril de 2017

archived copyRead from a public archive copy, not the publisher directly. The publisher does not serve this page to automated readers, so a direct fetch was not an option here; how we access sources. Archived 2023. Publisher's page: https://wipolex-res.wipo.int/edocs/lexdocs/laws/pt/st/st007pt.pdf

In force since 17 April 2017. Binds public and private bodies.

What this law does

Article 3(1)(b) protects summaries and compilations of works, whether protected or not, such as collections, encyclopaedias, and anthologies, as original works only where the choice or arrangement of their contents constitutes an intellectual creation, and article 3(1)(c) extends the same standard to systematic or annotated compilations of official texts (conventions, laws, regulations, and administrative or judicial decisions).

The Code names no database as such and creates no separate sui generis right in an unoriginal, purely factual collection of data, so a compilation that is not itself an original creation is not protected against reproduction under this article. Article 7(1)(a) additionally excludes news of the day and reports of various events disclosed merely as simple information from copyright protection altogether, whatever their protected status otherwise.

Infringing a protected compilation is punished under the Code's own penalty provisions (article 197), which punish, with the same terms, unauthorized use of a counterfeit or usurped work under article 199. Article 229 puts the Code into force on the date of its publication, which the Diário da República issue carrying it dates to 17 April 2017.

What it requires

News aggregation law1 instrument, 1 in force

Research summary (194 words)

São Tomé and Príncipe has no press-publisher neighbouring right, no compelled platform-to-publisher bargaining regime, no recognized hot-news misappropriation doctrine distinct from ordinary copyright law, and no statute or case law addressing hyperlinking or framing liability specifically has been located; each is a sourced absence rather than an unresolved question.

The operative instrument is Decree-Law No. 02/2017 (Copyright and Related Rights Code), which excludes news of the day and simple event reports from copyright protection altogether, and separately lets any person, once the author and source or title are credited where possible, make a regular press review of periodical articles, reproduce a short excerpt in reporting a current event, quote or summarize another's work for criticism or teaching, and reproduce an already-published current-affairs article on an economic, political, or religious topic unless its reproduction right was expressly reserved.

No Code provision states a headline-length or short-extract ceiling for the current-events branch, and no reported São Toméan decision applying either exception to a systematic news aggregator, as distinct from a traditional press review, has been located. The Code predates the concept of a machine-readable text-and-data-mining reservation entirely, so no opt-out mechanism of that kind exists either.

Snippet reproduction

Decreto-Lei n.º 02/2017, exclusão das notícias do dia, revista de imprensa e citação

Decreto-Lei n.º 02/2017, arts. 7, 75(2) e 76, de 19 de Abril de 2017, Código do Direito de Autor e dos Direitos ConexosDecreto-Lei n.º 02/2017 de 19 de Abril de 2017, Diário da República n.º 47 de 17 de Abril de 2017

archived copyRead from a public archive copy, not the publisher directly. The publisher does not serve this page to automated readers, so a direct fetch was not an option here; how we access sources. Archived 2023. Publisher's page: https://wipolex-res.wipo.int/edocs/lexdocs/laws/pt/st/st007pt.pdf

In force since 17 April 2017. Binds public and private bodies.

What this law does

Article 7(1)(a) excludes news of the day and reports of various events disclosed as simple information from copyright protection altogether, so a purely factual news item carries no copyright to begin with. For material that is protected, article 75(2)(c) permits, without the author's consent, a regular selection of periodical press articles in the form of a press review.

Article 75(2)(d) permits fixing, reproducing, or communicating short excerpts of a work when their use in reporting a current event is justified for information purposes. Article 75(2)(g) permits inserting citations or summaries of another's work in support of one's own views or for criticism, discussion, or teaching.

Article 75(2)(l) permits reproducing or communicating an already-accessible current-affairs article on an economic, political, or religious topic, or a broadcast work or material of like character, unless its reproduction or broadcast right has been expressly reserved. Article 76 conditions this free use on naming the author and publisher where possible and, for some of these uses, paying equitable remuneration.

None of these provisions states a length limit or a headline-only threshold, and no reported São Toméan decision testing whether a systematic aggregator's reproduction of headlines and snippets, as distinct from a traditional press review, falls within either exception has been located.

São Tomé and Príncipe has no separate press-publisher neighbouring right, no compelled platform-to-publisher bargaining regime, no recognized hot-news or misappropriation doctrine distinct from ordinary copyright law, and no case law on hyperlinking or framed display has been located.

Article 3(1)(b) protects a compilation as a copyright work only where its selection or arrangement of contents is itself an original creation, and the Code creates no sui generis database right and no text-and-data-mining exception or machine-readable opt-out mechanism. Article 229 puts the Code into force on the date of its publication, which the Diário da República issue carrying it dates to 17 April 2017.

Note and primary source

This page covers the instruments LexLint has researched to a stage. Instruments named in the corpus but not yet researched are counted in the head and are not listed here. Every entry carries its own primary source on its note page. This is a research index, not legal advice.