Law: Law 2013-450 on the Protection of Personal Data ('the Law')

Regulator: The Telecommunications/ICT Regulatory Authority of Côte d'Ivoire ('ARTCI')

Summary: The Law establishes a comprehensive data protection framework, including addressing matters such as prior authorisation for processing sensitive data, defining consent as a central principle, necessitating data protection officer appointments, and providing restrictions on data transfers. Law 2013-451 (only available in French here) sets out further measures for the regulation of cybersecurity, while Law 2013-546 governs electronic transactions. ARTCI is established and operational, and also focuses on broader telecommunications and ICT supervision. The Ivory Coast is an active member of the Economic Community of West African States ('ECOWAS'), and its data protection framework follows ECOWAS requirements.