Trains models, in Togo

Code du numérique du Togo (projet en cours d'élaboration depuis juin 2025, porté par le Ministère de l'Économie Numérique et de la Transformation Digitale)

Loi n° 2018-026 du 07 décembre 2018 sur la cybersécurité et la lutte contre la cybercriminalité, art. 8 (accès et maintien frauduleux à un système informatique) · Read the law's page

• Do not access, or remain present in, a computer system without right, including a system reached over the internet.
• Reading a public, unauthenticated page has not itself been held to violate this provision, but the statute does not expressly limit the offense to defeating a security measure.

Loi n° 2019-014 du 29 octobre 2019 relative à la protection des données à caractère personnel, arts. 1-20, 32-34, 51-54, 75-78 and 94-97 (comprehensive regime, formalities and obligations) · Read the law's page

• Have a lawful basis for processing personal data, generally the data subject's consent, or rely on a legal obligation, a public interest task, contract performance, or safeguarding the data subject's interest or fundamental rights and freedoms.
• Declare personal data processing to the Instance de Protection des Données à Caractère Personnel before implementing it, unless the processing is exempt from formalities, requires prior authorization, or requires a reasoned government opinion.
• Obtain the Instance's prior authorization before interconnecting files that serve different purposes, processing a national identification number or other general purpose identifier, or processing personal data for a historical, statistical or scientific public interest purpose.
• Collect and process personal data lawfully and fairly, only for determined and legitimate purposes, keep it accurate and up to date, and do not retain it beyond the period necessary for those purposes.
• Choose a processor that offers sufficient guarantees, govern the engagement with a written contract confining the processor to your instructions, and keep processing confidential under the authority of persons who have signed a written confidentiality undertaking.
• Take appropriate technical and organizational measures to prevent unauthorized access to, alteration of, or loss of personal data, and keep the data usable regardless of changes in the storage technology used.
• Where you appoint a data protection correspondent to qualify for the formality exemption, notify the appointment to the Instance and have the correspondent advise on compliance, cooperate with the Instance, and keep an accessible list of the processing you carry out.