Burkina Faso. Comprehensive data protection. Law
Law 001-2021Law No. 001-2021/AN of 30 March 2021 on the protection of persons with regard to the processing of personal data
In force
§1Summary
- Synopsis
Burkina Faso's updated data protection law, replacing the 2004 statute. It retains a notification regime administered by the CIL and requires CIL authorisation for transfers abroad.
- Key themes
- Unique features
Transfers abroad require CIL authorisation and contracts with confidentiality and reversibility clauses; turnover-based fines of 1% (first) or 5% (repeat).
- SaaS relevance
SaaS contracts with Burkinabè customers need reversibility and confidentiality clauses and CIL transfer approval.
§2Obligations
- Breach notification
- None (general)
- DPO
- No
- Cross-border transfers
- CIL authorisation plus adequacy and contractual clauses
- Maximum penalty
- XOF 100m; 1%/5% of turnover
§3Dates
- Key dates
- Adopted
- In force
- Replaced Law 010-2004/AN; CIL operational since 2007
§4Text and authority
- Text
- Authoritative text cil.bf
- Authority
- Commission de l'Informatique et des Libertés (CIL)
§5Where it applies
- Domestic law of
- Burkina Faso
§6Sources and verification
- Verification
High confidence.
CIL URL not fetched.