Data Protection Act, 2023, personal data breach notification

Data Protection Act, 2023 (Act 24 of 2023), ss. 43-44 (notification and communication of a personal data breach)

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force since 22 December 2023.

A breach notification rule binding public and private bodies.

As of 6 September 2026.

What it requires

Notify the Information Commission of a personal data breach no later than 72 hours after becoming aware of it, giving reasons for any later notification.
Promptly inform the affected data subjects where a breach is likely to affect a significant number of individuals and their rights and freedoms.

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

A data controller must notify the Information Commission of a personal data breach no later than 72 hours after becoming aware of it, and a late notification must be accompanied by reasons. Where a breach is likely to affect a significant number of individuals and their rights and freedoms, the data controller must promptly inform the affected data subjects.

When LexLint raises it

crawls_web
trains_models
deploys_chatbot

Read the law

Data Protection Act, 2023 (Act 24 of 2023), Supplement to the Official Gazette, Government of Seychelles

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app