World Watch/Togo/Data & Privacy

Data & Privacy · Togo

Data & Privacy - Togo

Comprehensive lawLoi n° 2019-014 du 29 octobre 2019 relative à la protection des données à caractère personnel, supervised by the Instance de Protection des Données à Caractère Personnel (IPDCP)

Togo has a comprehensive, GDPR-style personal data protection law (Law No. 2019-014 of 29 October 2019) regulating the collection, processing, storage, transfer and protection of personal data, making it an early adopter among Francophone African states. The law established an independent supervisory authority, the IPDCP, whose organization was set by Decree 2020-111/PR and which became operational with the appointment of its president by decree on 30 September 2024. The regime grants data subjects rights (access, rectification, objection, erasure) and imposes prior declaration/authorization, security, and cross-border transfer obligations on data controllers.

Comprehensive law in force

Law No. 2019-014 of 29 October 2019 governs the collection, processing, transmission, storage, use and protection of personal data, and aims to ensure ICTs do not infringe individual freedoms or privacy. It was published in the Journal Officiel.

Supervisory authority (IPDCP)

Article 55 of the law created the Instance de Protection des Données à Caractère Personnel (IPDCP), an independent administrative authority responsible for ensuring data processing complies with the law, with investigation, regulation and sanction powers.

Implementing decree

Decree 2020-111/PR governs the organization and functioning of the IPDCP, complementing the 2019 law to form the institutional framework for data protection.

Authority now operational

The IPDCP, created in 2020, began operationalization in 2024: Lieutenant-Colonel Bédiani Belei (a doctor of public law) was appointed president by decree dated 30 September 2024 to stand up the operational committee.

Controller obligations

Data controllers are subject to prior formalities (declaration to, or authorization from, the IPDCP depending on the processing), data security duties, and the IPDCP authorizes transfers of personal data abroad.

Data subject rights

The law protects individuals' privacy by guaranteeing control over their personal data from collection through processing, and the IPDCP handles citizen complaints and raises awareness of rights and obligations.

Machine-assisted translation · verified 5/24/2026 · orientation, not legal advice. English version →