Support Centre

You have out of 5 free articles left for the month

Signup for a trial to access unlimited content.

Start Trial

Continue reading on DataGuidance with:

Free Member

Limited Articles

Create an account to continue accessing select articles, resources, and guidance notes.

Free Trial

Unlimited Access

Start your free trial to access unlimited articles, resources, guidance notes, and workspaces.

São Tomé and Príncipe: ANPDP becomes fully operational

DataGuidance confirmed with João Luís Traça, Partner at Miranda & Associados, on 24 October 2018, that the São Tomé and Príncipe Data Protection Agency ('ANPDP') had become fully operational and data controllers may carry out the mandatory submissions set in Law No. 3/2016, of 10 May 2016, on the Protection of Personal Data ('the Law'), in relation to the processing of personal data.

Traça added, "Following the enactment of the Law, the processing of personal data is subject to a notification with the ANPDP and must be carried out within an eight-day prior notice period before processing can start. [In particular,] the data protection regime provides that processing may only be undertaken once the ANPDP has been notified or, for certain cases such as processing of personal data or data related with creditworthiness, following a specific authorisation granted by the ANPDP. The ANPDP has also issued six decisions exempting the need to carry out the above-mentioned notification, as long as the relevant processing takes place in accordance with the limits set in the decision."