São Tomé and Príncipe: ANPDP becomes fully operational
DataGuidance confirmed with João Luís Traça, Partner at Miranda & Associados, on 24 October 2018, that the São Tomé and Príncipe Data Protection Agency ('ANPDP') had become fully operational and data controllers may carry out the mandatory submissions set in Law No. 3/2016, of 10 May 2016, on the Protection of Personal Data ('the Law'), in relation to the processing of personal data.
Traça added, "Following the enactment of the Law, the processing of personal data is subject to a notification with the ANPDP and must be carried out within an eight-day prior notice period before processing can start. [In particular,] the data protection regime provides that processing may only be undertaken once the ANPDP has been notified or, for certain cases such as processing of personal data or data related with creditworthiness, following a specific authorisation granted by the ANPDP. The ANPDP has also issued six decisions exempting the need to carry out the above-mentioned notification, as long as the relevant processing takes place in accordance with the limits set in the decision."