Operates a social platform, in Gabon

Loi N° 027/2023 du 11 juillet 2023, Titre III, Chapitre III, Section 2, arts. 28-35 · Read the law's page

• This binds any operator of an information system with effects in Gabon, a term Law No. 027/2023 defines without a sector or size gate as an organised set of resources that collects, groups, classifies, processes or disseminates information, and separately binds any person whose activity is to offer users access to an information system.
• Take all technical and administrative measures necessary to guarantee the security of the services you offer, including a standardised system to identify, evaluate, treat and continuously manage the risks affecting your information systems' security.
• Deploy technical mechanisms addressing threats to your systems' continuous availability, integrity, authentication, resistance to repudiation by third-party users, data confidentiality and physical security, and have those mechanisms cleared for conformity with the competent administrative authority's cybersecurity policy.
• If your activity is to offer users access to an information system, inform them of the danger of using an unsecured system, the need for a parental-control device, the particular risks of a security breach, and the existence of a technical means to restrict access to certain services, and offer them at least one such means.
• Retain your systems' connection and traffic data for ten years, and submit your networks and information systems to a mandatory, periodic security audit on terms a regulation sets.
• Comply within six months of the law's entry into force; Article 98 does not itself state what sanction follows a late or missing compliance with this duty.

Ordonnance n°0011/PR/2026, art. 14, 16-24 et 53 (protection des mineurs), du 26 février 2026 portant réglementation de l'usage des réseaux sociaux · Read the law's page

• Applies to editors of social networks, online communication services and digital platforms that allow account or profile creation, except educational, cultural or scientific directories, free and open-source software platforms, and supervised school content with parental consent.
• Do not let a user under 16 create an account or profile on a covered service.
• Within twelve months of the ordinance's publication, deploy an effective technical mechanism that verifies a user's age at registration; a user's own false declaration of age does not relieve you of this duty of reasonable vigilance.
• Block or suspend posting, sharing and social-interaction features on an account identified as belonging to a user under 16, unless parental consent is formally registered.
• For accounts identified as minors, disable by default any feature that lets an unidentified person contact them directly, and filter AI-generated violent, sexual or psychologically harmful content out of algorithmic recommendations.
• Keep pornographic content from users under 18, using an age-verification system that meets the minimum requirements of the technical référentiel (reference standard) the Haute Autorité de la Communication publishes.
• Report quarterly on the number of minor accounts detected, blocked or removed and the verification methods used.
• Acknowledge a cyberbullying report, or a report of harmful content involving a minor, within twenty-four hours, and decide on it and notify the user within seventy-two hours.

Ordonnance n°0011/PR/2026, art. 32-33 (contenus IA interdits), du 26 février 2026 portant réglementation de l'usage des réseaux sociaux · Read the law's page

• Do not circulate a realistic deepfake depicting an identifiable person in a sexual situation without their express consent.
• Do not circulate a deepfake of a public or private figure attributing false statements or conduct to them capable of causing serious harm to public order, national security, or personal dignity.
• Do not circulate AI-generated content depicting a sexual situation involving a minor, by any technical method.
• Do not imitate a Gabonese state institution's visual or audio identity for disinformation purposes.

Ordonnance n°0011/PR/2026, art. 53 (marquage des contenus IA), du 26 février 2026 portant réglementation de l'usage des réseaux sociaux · Read the law's page

• Within twelve months of this ordinance's publication, deploy tools that automatically detect AI-generated or substantially AI-modified content published or shared on your service.
• Affix a visible, clear, and permanent label on content identified as generated or substantially modified by an AI system, accessible to the user without any further action on their part.
• Preserve the origin metadata of AI-generated content under judicial or administrative investigation, and hand it to the Haute Autorité de la Communication within eight days of a request.