Makes high-risk automated decisions, in Togo

Code du numérique du Togo (projet en cours d'élaboration depuis juin 2025, porté par le Ministère de l'Économie Numérique et de la Transformation Digitale)

Loi n° 2019-014 du 29 octobre 2019 relative à la protection des données à caractère personnel, arts. 1-20, 32-34, 51-54, 75-78 and 94-97 (comprehensive regime, formalities and obligations) · Read the law's page

• Have a lawful basis for processing personal data, generally the data subject's consent, or rely on a legal obligation, a public interest task, contract performance, or safeguarding the data subject's interest or fundamental rights and freedoms.
• Declare personal data processing to the Instance de Protection des Données à Caractère Personnel before implementing it, unless the processing is exempt from formalities, requires prior authorization, or requires a reasoned government opinion.
• Obtain the Instance's prior authorization before interconnecting files that serve different purposes, processing a national identification number or other general purpose identifier, or processing personal data for a historical, statistical or scientific public interest purpose.
• Collect and process personal data lawfully and fairly, only for determined and legitimate purposes, keep it accurate and up to date, and do not retain it beyond the period necessary for those purposes.
• Choose a processor that offers sufficient guarantees, govern the engagement with a written contract confining the processor to your instructions, and keep processing confidential under the authority of persons who have signed a written confidentiality undertaking.
• Take appropriate technical and organizational measures to prevent unauthorized access to, alteration of, or loss of personal data, and keep the data usable regardless of changes in the storage technology used.
• Where you appoint a data protection correspondent to qualify for the formality exemption, notify the appointment to the Instance and have the correspondent advise on compliance, cooperate with the Instance, and keep an accessible list of the processing you carry out.

Loi n° 2019-014 du 29 octobre 2019, art. 27 (automated individual decisions) · Read the law's page

• Do not base a decision producing legal effects concerning a person solely on an automated evaluation of their personal characteristics or profile, except a contractual decision on which they could state their views or one granting their own request.