World Watch/Togo/Data & Privacy

Data & Privacy · Togo

Data protection & privacy laws in Togo (2026)

Comprehensive lawLoi n° 2019-014 du 29 octobre 2019 relative à la protection des données à caractère personnel, supervised by the Instance de Protection des Données à Caractère Personnel (IPDCP)Country index 78 · B+

Togo shaded by its data & privacy status

Togo has a comprehensive, GDPR-style personal data protection law (Law No. 2019-014 of 29 October 2019) regulating the collection, processing, storage, transfer and protection of personal data, making it an early adopter among Francophone African states. The law established an independent supervisory authority, the IPDCP, whose organization was set by Decree 2020-111/PR and which became operational with the appointment of its president by decree on 30 September 2024. The regime grants data subjects rights (access, rectification, objection, erasure) and imposes prior declaration/authorization, security, and cross-border transfer obligations on data controllers.

Key points

Comprehensive law in force

Law No. 2019-014 of 29 October 2019 governs the collection, processing, transmission, storage, use and protection of personal data, and aims to ensure ICTs do not infringe individual freedoms or privacy. It was published in the Journal Officiel.

Supervisory authority (IPDCP)

Article 55 of the law created the Instance de Protection des Données à Caractère Personnel (IPDCP), an independent administrative authority responsible for ensuring data processing complies with the law, with investigation, regulation and sanction powers.

Implementing decree

Decree 2020-111/PR governs the organization and functioning of the IPDCP, complementing the 2019 law to form the institutional framework for data protection.

Authority now operational

The IPDCP, created in 2020, began operationalization in 2024: Lieutenant-Colonel Bédiani Belei (a doctor of public law) was appointed president by decree dated 30 September 2024 to stand up the operational committee.

Controller obligations

Data controllers are subject to prior formalities (declaration to, or authorization from, the IPDCP depending on the processing), data security duties, and the IPDCP authorizes transfers of personal data abroad.

Data subject rights

The law protects individuals' privacy by guaranteeing control over their personal data from collection through processing, and the IPDCP handles citizen complaints and raises awareness of rights and obligations.

Togo - other topics

Last verified 5/24/2026 · Orientation, not legal advice - verify against the primary sources linked above. Explore the full world map →