Seychelles does not currently have data protection legislation in operation. The Data Protection Act, 2003 was passed in 2003, with the aim of ensuring that personal data is obtained and process in a fair and lawful manner. However, the Act is not currently in force. The Act does not apply to a data user in respect of data held, or to a person carrying on a computer bureau in respect of services provided outside Seychelles, nor does it apply to data processed wholly outside Seychelles unless the data is used or intended to be used in Seychelles. In circumstances where a person, who is not resident in Seychelles, controls or processes data through a servant or agent acting on their own account in Seychelles, the Act will apply.