Skip to content
World Watch

Data protection & privacy law in Sierra Leone (2026)

Data protection in Sierra Leone: proposed.

As of May 2026, Sierra Leone has no enacted comprehensive data-protection statute and no dedicated data-protection authority. A GDPR- and AU Malabo Convention-aligned Data Protection and Right to Access Information Bill, 2025 has been drafted and nationally validated (final validation concluded 7 November 2025) and is awaiting Cabinet approval and parliamentary enactment. In the interim, only narrow sector provisions in the Telecommunications Act 2006 and Cyber Security and Crime Act 2021 address aspects of privacy.

Last verified Official sources first · MethodologyCompare Sierra Leone with other countries

Legal framework

No comprehensive personal-data protection law is in force. The Data Protection and Right to Access Information Bill, 2025 (which would create a single independent regulator for both data protection and access to information) completed national validation in November 2025 and is progressing toward Cabinet and Parliament. Only fragmentary sectoral provisions (Telecommunications Act 2006; Cyber Security and Crime Act 2021) currently touch on personal data.

Key points: data & privacy in Sierra Leone

  1. No comprehensive law yet

    Sierra Leone currently lacks a dedicated, omnibus personal-data protection statute and a standalone data-protection regulator; protection is fragmentary.

    dataguidance.com dataprotection.africa

  2. Comprehensive bill in progress

    The Data Protection and Right to Access Information Bill, 2025 has been drafted and is being advanced by the Ministry of Information and Civic Education; it is intended to be Sierra Leone's first comprehensive data-protection law.

    moice.gov.sl moice.gov.sl

  3. Final validation completed Nov 2025

    Government concluded the final national validation of the Bill on 7 November 2025; next steps are Cabinet approval followed by presentation to Parliament for enactment.

    moice.gov.sl sierraloaded.sl

  4. Proposed supervisory authority

    The Bill would establish a single independent commission responsible for both data protection and access to information, giving citizens rights to know how their personal data is collected, stored and used.

    moice.gov.sl ncra.gov.sl

  5. International alignment

    The draft is reported to align with the EU GDPR and the African Union's Malabo Convention on Cyber Security and Personal Data Protection, partly to support trade and data-standard interoperability.

    moice.gov.sl

  6. Interim sectoral provisions

    Pending the new law, limited privacy-relevant provisions exist in the Cyber Security and Crime Act, 2021 (in force since Nov 2021) and the Telecommunications Act, 2006 covering data handled by network operators.

    sierralii.gov.sl parliament.gov.sl

Sources

  1. moice.gov.sl/moice-concludes-final-national-validation-of-the-data-protection-and-
  2. moice.gov.sl/nationwide-consultations-begin-on-sierra-leones-first-data-protection
  3. moice.gov.sl/government-sets-sight-on-finalizing-data-protection-law/
  4. ncra.gov.sl/ncra-presents-draft-data-protection-policy-and-bill-to-stakeholders/
  5. sierraloaded.sl/news/government-data-protection-information-bill/
  6. dataprotection.africa/sierra-leone/
  7. dataguidance.com/jurisdiction/sierra-leone
  8. sierralii.gov.sl/akn/sl/act/2021/7/eng@2021-11-25
  9. parliament.gov.sl/uploads/acts/THE%20CYBERSECURITY%20AND%20CRIME%20ACT,%202021%20-%20%2

Next for Sierra Leone: Digital Payments & FintechLicensing regime

Next topic

Orientation, not legal advice: verify against the primary sources linked above. Last verified 24 May 2026. Methodology & how to cite · State of Technology Regulation 2026