Chad. Comprehensive data protection. Law
Law 007/PR/2015Law No. 007/PR/2015 of 10 February 2015 on the protection of personal data
In force
Partly verified
Medium confidence.Day/month of law and ANSICE URL not verified. [Link: unofficial copy (scan of signed law, FR/AR)]
§1Summary
- Synopsis
Chad's data protection law, enforced by the national cybersecurity agency ANSICE. It operates a declaration and authorisation system with adequacy-based transfers.
- Key themes
- Unique features
Transfers outside the CEMAC/ECCAS area need adequacy and prior notice to ANSICE.
- SaaS relevance
SaaS processing Chadian data outside Central Africa must satisfy ANSICE transfer rules.
§2Obligations
- Breach notification
- None
- DPO
- No
- Cross-border transfers
- Adequacy outside CEMAC/ECCAS; inform ANSICE
- Maximum penalty
- XAF 10m and 1-5 years' imprisonment
§3Dates
- Key dates
- Adopted
- In force
- Implementing Decree 075/PR/2019; ANSICE operational 2020
§4Text and authority
- Text
- Authoritative text dataprotection.africa
- Authority
- Agence Nationale de Sécurité Informatique et de Certification Électronique (ANSICE)
§5Where it applies
- Domestic law of
- Chad
§6Sources and verification
- Sources consulted
- Verification
Medium confidence.
Partly verified
Medium confidence.Day/month of law and ANSICE URL not verified. [Link: unofficial copy (scan of signed law, FR/AR)]