Côte d'Ivoire. Comprehensive data protection. Law
Law 2013-450Law No. 2013-450 of 19 June 2013 on the protection of personal data
In force
§1Summary
- Synopsis
Côte d'Ivoire's data protection law, supervised by the telecoms/ICT regulator ARTCI. It operates a prior declaration and authorisation system, with strict control of transfers.
- Key themes
- Unique features
Every transfer to a third country needs prior ARTCI authorisation even if the destination is adequate, the applicant must be an Ivorian legal entity, and an annual transfer report is required.
- SaaS relevance
Foreign SaaS used by Ivorian customers effectively requires the local customer to obtain ARTCI transfer authorisation.
§2Obligations
- Extraterritorial
- Limited
- Breach notification
- None
- DPO
- No
- Cross-border transfers
- Prior ARTCI authorisation for all third-country transfers
- Maximum penalty
- Administrative sanctions and fines; criminal penalties
§3Dates
- Key dates
- Adopted
- In force
- Decree 2015-79 on filing procedures; 2014 order on DPO (CPDCP) profile
§4Text and authority
- Text
- Authoritative text artci.ci
- Authority
- Autorité de Régulation des Télécommunications/TIC de Côte d'Ivoire (ARTCI)
§5Where it applies
- Domestic law of
- Côte d'Ivoire
§6Sources and verification
- Verification
High confidence.
Penalty amounts not captured.