Section 5.15.1 of the National Information and Communications Technology Policy of 2019 regulates the lawful processing of personal data. Its states that:

1. Personal data will be processed fairly and lawfully;
2. Personal data will be obtained only for one or more specified and lawful purposes, and will not be further processed in any manner incompatible with their purpose or those purposes;
3. Personal data will be adequate, relevant and not excessive in relation to the purpose or purposes for which they are processed;
4. Personal data will be accurate and where necessary, kept up to date;
5. Personal data processed for any lawful purpose or purposes will not be kept for longer than is necessary for that purpose or those purposes;
6. Appropriate technical and organizational measures will be taken against unauthorized or unlawful processing of personal data and the protection of children;
7. Data collectors will be required to disclose use of personal data to consumers.
8. Collected personal data will be rigorously protected from unauthorized access by any Parties.

Section 51(5) of the Telecommunication Act states that “Service providers shall ensure that customer information and customer communications are protected by security safeguards that are appropriate to their sensitivity”.

Section 3.1.1 of the 2017 AML / CFT Regulations for Financial Institutions in Liberia states that “financial institutions shall obtain and maintain documentary records for each client or customer to verify by reliable and independent source documents (such as a passport, a driver’s license, or national identification documents)”.

Section 3.1.7 of the 2017 AML / CFT Regulations for Financial Institutions in Liberia provides that the required KYC information must be collected before financial institutions establish any relationship with a person. That is, prior to opening a bank account or performing walk in transactional services for non-account holders