Seychelles has introduced updated data protection regulations that impose new obligations on businesses handling personal data. These changes align Seychelles more closely with international data protection standards and have implications for businesses across all sectors.
Key requirements
- Data protection registration: Businesses that process personal data must register with the relevant authority and maintain a record of their data processing activities.
- Privacy notices: Clear and transparent privacy notices must be provided to individuals whose data is collected and processed.
- Data security: Appropriate technical and organisational measures must be implemented to protect personal data against unauthorised access, loss, or destruction.
- Breach notification: Data breaches must be reported to the relevant authority within a specified timeframe.
Compliance deadlines
Businesses are required to comply with the updated regulations by the end of Q3 2026. We recommend that all businesses review their data handling practices and take steps to ensure compliance well ahead of the deadline.
Pool & Patel can assist with compliance reviews, policy development, and implementation of appropriate data protection measures. Please contact us for more information.