Papua New Guinea
LimitedCybercrime Code Act 2016 + Constitution (privacy provisions)
Authority: National Information and Communications Technology Authority (NICTA) | Enforcement: partial | Enacted: December 2016
Overview
Papua New Guinea does not have a comprehensive data protection law. Limited protections come from the Cybercrime Code Act 2016, the Constitution, and sector regulations. NICTA oversees ICT regulation. A data protection framework is being considered.
14-Topic Coverage
Data Protection Authority
Partially AddressedNICTA has ICT oversight. No dedicated DP authority.
Consent Requirements
Partially AddressedConstitutional privacy rights. Limited statutory provisions.
Data Subject Rights
Partially AddressedConstitutional rights. No comprehensive data subject rights framework.
Cross-Border Transfer
Not AddressedNo specific cross-border transfer framework.
Breach Notification
Not AddressedNo mandatory breach notification requirement.
DPO Requirements
Not AddressedNo DPO requirement.
Children's Data
Partially AddressedChild welfare legislation exists. No specific data provisions.
Penalties & Enforcement
Partially AddressedCybercrime Code penalties for certain data offences.
Sector-Specific Rules
Partially AddressedBPNG financial data guidelines.
Cookie/Tracking
Not AddressedNo specific regulation.
AI & Automated Decisions
Not AddressedNo specific provisions.
Data Localisation
Not AddressedNo data localisation requirement.
Significant Data Fiduciary
Not AddressedNo equivalent concept.
Government Data
Partially AddressedVarious regulations protect government data.
Coverage Summary
Quick Navigation
Need Compliance Help?
Our data privacy team can help you navigate Papua New Guinea's regulations.
Book a Consultation