São Tomé e Príncipe has not signed the United Nations (UN) Convention on the Use of Electronic Communications in International Contracts.

São Tomé e Príncipe has not adopted national legislation based on the United Nations Commission on International Trade Law (UNCITRAL) Model Law on Electronic Commerce.

São Tomé e Príncipe has not adopted national legislation based on the United Nations Commission on International Trade Law (UNCITRAL) Model Law on Electronic Signature.

Law No. 03/2016 establishes a comprehensive data protection framework and addresses matters such as data processing notifications, data protection principles, data processor agreements, and essential data subject rights.

A basic legal framework on intermediary liability for copyright infringement is absent in São Tomé e Príncipe's law and jurisprudence.

A basic legal framework on intermediary liability beyond copyright infringement is absent in São Tomé e Príncipe's law and jurisprudence.

Arts. 7 and 8 of Decree No. 20/2012 impose that the purchasers of SIM cards register their names and national identity numbers before the telecommunications operators.

Self-certification is allowed in São Tomé e Príncipe for radio transmission, electromagnetic interference (EMI) or electromagnetic compatibility (EMC). São Tomé e Príncipe allows foreign companies to self-certify that they comply with these standards through a Supplier Declaration of Conformity (SDoC).

The government owns 49% of the shares of Companhia Santomense de Telecomunicações, SARL (CST).

São Tomé e Príncipe does not mandate functional separation for operators with significant market power (SMP) in the telecom market. However, there has been an obligation of accounting separation since 2007, according to Arts. 6.1 and 25 of Law No. 24/2007.

São Tomé e Príncipe has not appended the World Trade Organization (WTO) Telecom Reference Paper to its schedule of commitments. This is because São Tomé e Príncipe is not a member of the WTO, although it is an observer.

The General Regulatory Authority of the Democratic Republic of São Tomé e Príncipe (AGER) is the executive authority for the supervision and administration of services in the telecommunications sector. The authority is independent from the government in the decision-making process, as confirmed in Art. 5 of Decree-Law No. 14/2005, which states that AGER is a legal person governed by public law, with technical, administrative and financial autonomy and its own assets.

According to Art. 19 of Law No. 03/2016, cross-border transfer of personal data is only permitted to countries considered to provide adequate levels of protection, as determined by the National Data Protection Agency (ANPDP). However, according to Art. 20, the transfer to a legal system that does not ensure an adequate level of protection may be carried out by notifying the ANPDP or is permitted where the data subject has given their consent;
- the transfer is necessary for the performance of a contract between the data subject and the controller;
- the transfer is necessary for the performance of a contract entered into in the interest of the data subject between the controller and third party;
- the transfer is necessary or required by law for the protection of an important public interest or for the declaration, exercise or defence of a right in legal proceedings
- the transfer is necessary to protect the vital interests of a data subject; or
- the transfer is made from a register which, according to the laws or regulations, is intended to provide information to the public and which is open to consultation either by the public in general or by any person who can demonstrate legitimate interest provided conditions laid down in the law for consultation are fulfilled in each case.
In addition, the ANPDP may authorise a transfer or a set of transfers of personal data to a jurisdiction which does not ensure an adequate level of protection provided that the controller ensures adequate mechanisms to ensure the protection of privacy and the fundamental rights and freedoms of persons and of their performance, in particular by means of appropriate contractual clauses.

São Tomé e Príncipe has not joined any agreement with binding commitments to open transfers of data across borders.

São Tomé e Príncipe is a party to the Patent Cooperation Treaty (PCT).