Suspect a breach? Report it immediately — response within 1 hour.Report an incident
EBH Security
Contact us

Cybersecurity and Compliance in Gabon

Security audits, penetration testing, and compliance for organizations operating in Gabon, under Ordinance No. 00015/2018.

Last updated — August 22, 2026

The local regulatory framework

In Gabon, personal data protection is governed by Ordinance No. 00015/2018, overseen by the Commission nationale pour la protection des données à caractère personnel (CNPDCP). The Agence nationale des infrastructures numériques et des fréquences (ANINF) handles matters related to digital infrastructure and information systems security.

Concrete obligations

Prior declaration or authorization of personal data processing with the CNPDCP

Implementation of risk-proportionate security measures under Ordinance No. 00015/2018

Notification of personal data breaches to the CNPDCP

Compliance with digital infrastructure security requirements overseen by ANINF

Adapted services

Governance, Risk & Compliance (GRC)

Security Audit

Penetration Testing

Managed SOC & MDR

Priority sectors

Energy and natural resourcesFinancial servicesPublic sector and government

Delivery modalities

Engagement mode

On-site missions in Libreville, remote delivery for the rest of the territory

Working language

French

Regulatory coordination

Dedicated contact for interactions with the CNPDCP and ANINF

Local FAQ

Which authority oversees data protection in Gabon?

The Commission nationale pour la protection des données à caractère personnel (CNPDCP), which enforces Ordinance No. 00015/2018.

What is the role of ANINF?

The Agence nationale des infrastructures numériques et des fréquences oversees digital infrastructure and information systems security nationally.

Is a declaration to the CNPDCP always required?

The requirement depends on the nature of the processing; some activities require prior authorization rather than a simple declaration. We assess this based on your activity.

Do you work with Gabon's oil and energy sector?

Yes, this sector is a priority given its economic criticality and exposure to cyber risk.

Do you support compliance with Ordinance No. 00015/2018?

Yes, through our governance, risk and compliance service, covering diagnosis and operational implementation.

Get in touch