LexLint.ioBeta

Know the law your code answers to.

Law / Senegal

Décret n° 2008-721 du 30 juin 2008 portant application de la loi n° 2008-12 du 25 janvier 2008 sur la protection des données à caractère personnel, régimes de traitement et obligations du responsable

Décret n° 2008-721 du 30 juin 2008, arts. 20-32, 63-66 (régimes de traitement et obligations du responsable)

archived copyRead from a public archive copy, not the publisher directly. The publisher does not serve this page to automated readers, so a direct fetch was not an option here; how we access sources. Archived 2022. Publisher's page: http://www.jo.gouv.sn/spip.php?page=imprimer&id_article=7207

In force.

A comprehensive regime rule binding public and private bodies.

Obligation class
Governance, Security, Retention
Audit expectation
none

What it requires

  • Keep the data confidential, available and accurate, and protect your systems and networks against accidental or unauthorized destruction of data, technical errors, falsification, theft and unlawful use.
  • If a processor handles the data for you, stay responsible for how it uses and communicates them.
  • Destroy, erase, delete or archive personal data when the retention period set for the processing ends.

These lines are LexLint's reading of the law's text.

What it makes you log

Logging duty

Articles 20 to 32 set the declaration and authorization regimes and Articles 63 to 66 the confidentiality, security and retention duties. A declaration, a receipt and a notice to the CDP are filings and not a record the controller keeps, and Article 65 names security measures without naming a log or a record. None of the cited articles carries a scope clause.

Kind
None
As of

What this law does

Drafted with AI

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made

Research summary

Legal information, not legal advice. This is LexLint's own research summary of a public legal source, and it creates no attorney-client relationship. For decisions that matter, consult qualified counsel in the relevant jurisdiction. About LexLint

Article 20 makes the purpose of a planned processing and the nature of the data collected decide which regime applies to it. Article 24 has the CDP issue a receipt once a declaration meets the Act, and the processing may then be carried out under the declarant's responsibility. Article 32 forbids any processing of personal data when the person's consent has not been obtained. Article 63 requires the controller to ensure the confidentiality, availability and accuracy of the data collected.

Article 64 lets a controller have data processed by a processor where the protection of the data is guaranteed, but the controller remains responsible for lawful use and communication of the data. Article 65 requires the controller to take security measures protecting systems and networks against accidental or unauthorized destruction of data, technical errors, and falsification, theft or unlawful use of data.

Article 66 requires personal data to be destroyed, erased, deleted or archived when the retention period set for a processing ends. The decree was signed at Dakar on . The decree was published in Journal officiel n° 6443 of , according to the ILO NATLEX record. Article 76 charges the Prime Minister and the ministers with applying the decree, which is to be published in the Journal officiel.

When LexLint raises it

When your app profile says your app processes personal data.

Back to the example  ·  Lint your app

Page updated .