Serves under-18s, in Gabon

Loi N° 027/2023 du 11 juillet 2023, Titre III, Chapitre III, Section 2, arts. 28-35 · Read the law's page

• This binds any operator of an information system with effects in Gabon, a term Law No. 027/2023 defines without a sector or size gate as an organised set of resources that collects, groups, classifies, processes or disseminates information, and separately binds any person whose activity is to offer users access to an information system.
• Take all technical and administrative measures necessary to guarantee the security of the services you offer, including a standardised system to identify, evaluate, treat and continuously manage the risks affecting your information systems' security.
• Deploy technical mechanisms addressing threats to your systems' continuous availability, integrity, authentication, resistance to repudiation by third-party users, data confidentiality and physical security, and have those mechanisms cleared for conformity with the competent administrative authority's cybersecurity policy.
• If your activity is to offer users access to an information system, inform them of the danger of using an unsecured system, the need for a parental-control device, the particular risks of a security breach, and the existence of a technical means to restrict access to certain services, and offer them at least one such means.
• Retain your systems' connection and traffic data for ten years, and submit your networks and information systems to a mandatory, periodic security audit on terms a regulation sets.
• Comply within six months of the law's entry into force; Article 98 does not itself state what sanction follows a late or missing compliance with this duty.

Loi n°025/2023, articles 74 à 77, 148 à 163 et 188 à 199 (catégories sensibles de données et protection des mineurs) · Read the law's page

• Process a minor's personal data only on their own consent once they turn eighteen, or otherwise only with the express authorization of the holder of parental authority, and confirm by some means that the consent you rely on is theirs.
• Do not collect or process data revealing racial or ethnic origin, political, philosophical or religious opinions, trade-union membership, biometric or genetic data, or data on health or sex life, unless a listed exception applies, such as the data subject's own express consent, a non-profit body's processing of its own members, data the person made public, or preventive medicine and care administered by a bound health professional.
• Process data on offences, criminal convictions and safety measures only where you are a public, judicial or public-service body acting within your legal remit, or a legal auxiliary acting for the defense of the person concerned.
• Before processing personal data for a public-interest research, study or evaluation purpose in the health domain, obtain the APDPVP's authorization, given after the health-research consultative committee opines on your methodology and the necessity and relevance of the data.
• Before collecting a child's personal data through a search engine, website, platform, application, or connected or geolocation service, obtain the prior consent of the child's parent or the person holding parental responsibility.
• Do not profile a child, except where the APDPVP has authorized it on a motivated opinion for the child's best interest or on a public-interest ground.
• Treat as void, on a challenge before the competent court, a contract a child enters through an internet-based service where it is prejudicial to the child.
• Where your online service is aimed at children, build in privacy-protective technical measures such as marking and filtering, write information for them in terms they can understand, keep advertising, entertainment and games clearly distinct from content, never incite a child to buy goods or enter an online contract, and never use prizes, rewards or links to a non-compliant site to keep them engaged.

Ordonnance n°0011/PR/2026, art. 32-33 (contenus IA interdits), du 26 février 2026 portant réglementation de l'usage des réseaux sociaux · Read the law's page

• Do not circulate a realistic deepfake depicting an identifiable person in a sexual situation without their express consent.
• Do not circulate a deepfake of a public or private figure attributing false statements or conduct to them capable of causing serious harm to public order, national security, or personal dignity.
• Do not circulate AI-generated content depicting a sexual situation involving a minor, by any technical method.
• Do not imitate a Gabonese state institution's visual or audio identity for disinformation purposes.