Section 22 of the Data Protection Act establishes that processing of personal data relating to race, ethnic origin, biometrics, genetics, political opinions, religious or philosophical beliefs or for the purpose of identifying a person's health or sex life is prohibited. Some exceptions apply, including in the case of consent of the data subject. In addition, under Section 24, processing of personal data relating to criminal convictions and offences or related security measures shall be carried out only under the control of official authority or when the processing is authorised by law providing for appropriate safeguards for the rights and freedoms of a data subject. Moreover, Section 47(3) provides that personal data of Seychellois citizens pertaining to minors shall only be processed and transferred only if: (i) there is a designated data controller accountable for cross-border data processing in Seychelles; (ii) the transfer is made between intra-group schemes, and the headquarters is located outside Seychelles; (iii) the data controller or data processor has informed the data subjects about the location of the data processing and all other relevant information as specified under Section 27; and (iv) the transfer is necessary to protect vital interests of the data subject.
In addition, Section 23 states that no person shall process the personal data of a child below the age of 18 years unless consent is given by the child's parent or legal guardian. The data controller shall obtain consent from the parents or legal guardians or verify that consent has been given in the case of data obtained from third parties, taking into account available technology.

Seychelles is not participating in trade or regional agreements committed to open transfer or cross-border data flows.

The Data Protection Act provides a comprehensive regime of data protection in Seychelles.

According to Art. 40 of the Data Protection Act, where a type of processing is likely to result in a high risk to the rights and freedoms of any individual, the data controller shall, prior to the processing, carry out a data protection impact assessment.
An assessment is required when: (i) a systematic and extensive evaluation of personal aspects relating to individuals which are based on automated processing, including profiling, and on which decisions are based that produce legal effects concerning the individual or significantly affect the individual; (ii) processing on a large scale of special categories of data referred to under section 23 (data related to minors); (iii) there is systematic monitoring of a publicly accessible area on a large scale; (iv) there exist any other circumstances as specified by the Commission in the implementation of this Act.
Furthermore, according to Art. 40.3, the data protection impact assessment shall include the following: (i) a general description of the envisaged processing operations, their purpose, and legitimate interest pursued by the data processor; (ii) an assessment of the risks to the rights and freedoms of the data subjects; (iii) the measures envisaged to address those risks; and (iv) safeguards, security measures and mechanisms to ensure the protection of personal data and to demonstrate compliance with this section, taking into account the rights and legitimate interests of the data subjects and other persons concerned.
According to Art. 45.1, the data controller shall designate a data protection officer when (i) the core activities of the data controller or the data processor consist of processing operations which, by virtue of their nature, their scope or their purposes, require regular and systematic monitoring of the data subjects on a large scale; or (ii) the core activities of the data controller or the data processor consist of processing on a large scale of special categories of data under Part IV (sensitive data, data related to minors and data relating to offences and criminal conviction).

A basic legal framework on intermediary liability for copyright infringement is absent in Seychelles's law and jurisprudence.

A basic legal framework on intermediary liability beyond copyright infringement is absent in Seychelles's law and jurisprudence.

Seychelles has not signed the World Intellectual Property Organization (WIPO) Performances and Phonograms Treaty.

Seychelles does not have a comprehensive framework in place that provides effective protection of trade secrets, but there are limited measures addressing some issues related to them. The Industrial Property Act provides a definition under Section 106 stating that information shall be considered "undisclosed information" if:
- it is secret in the sense that it is not, as a body or in the precise configuration and assembly of its components, generally known among or readily accessible to persons within the circles that normally deal with the kind of information in question;
- it has commercial value because it is secret; and
- its legitimate holder has taken reasonable steps, under the circumstances, to keep it secret.

According to Art. 35(e) of the Broadcasting and Telecommunication Act, every person providing a telecommunication service must afford access to towers, poles, ducts, conduits, and such person's right-of-way to his competitors on rates, terms and conditions that are reasonable and non-discriminatory.

It is reported that the Government of Seychelles owns 40.6% shareholding of Seychelles Cable Systems Company Limited (SCS). SCS is a private-public partnership made up of the Seychelles Government, Cable & Wireless (33.4%) and Airtel (26%) that was set up to act as a promoter of the Seychelles East Africa Submarine (SEAS) cable project.

It is reported that Seychelles does not mandate functional separation for operators with significant market power (SMP) in the telecom market. However, there is an obligation of accounting separation.

Seychelles is not a party to the World Trade Organization (WTO) Agreement on Government Procurement (GPA). However, the country has been an observer of the WTO GPA since 2015.

The Seychelles Investment (Economic Activities) Regulations, 2022, states all economic activities with FDI restrictions. Sectors relevant for digital trade are not subject to restriction.

Section 10.6 of the Industrial Property Act stipulates that a patent applicant who is neither domiciled in nor has an established business in Seychelles must appoint an agent domiciled in Seychelles.

Seychelles is a party to the Patent Cooperation Treaty (PCT). However, the country does not consider itself bound by Art. 59 related to disputes.