Guinea

Summary

Guinea (Republic of Guinea / Guinée) presents uncertain risk; the legal framework exists on paper but enforcement is essentially non-existent. Law No. L/2016/037/AN of 26 July 2016 on cybersecurity and personal data protection (a combined instrument) criminalises unauthorised access (Part 1) and establishes personal-data protection obligations (Part 2). Primary source text is confirmed available at multiple indexed repositories: the ANSSI Guinée official site, the Guinea Supreme Court legal database (coursupreme.org.gn), CYRILLA (Global Digital Rights Law), and ICT Policy Africa. The law number is definitively L/2016/037/AN (the earlier citation ambiguity between L/2015/037 and L/2016/037 is resolved — promulgated as L/2016/037/AN on 26 July 2016). Criminal penalties for unauthorised access and improper data processing are defined but the law has been criticised for vague definitions. No independent data protection authority with functioning enforcement capacity has been identified. No EU-style sui generis database right; database protection is compilation-originality only. Guinea is an ECOWAS member. Political instability (2021 coup, ongoing military rule) has severely curtailed regulatory and judicial function. No web-scraping case law exists. Confidence raised to medium: primary sources are accessible and the legal framework is determinable; enforcement gap is real but documented.