Cybersecurity law & regulation in Burkina Faso (2026)
Cybersecurity in Burkina Faso: comprehensive law.
Burkina Faso enacted a dedicated, cross-sectoral Information Systems Security Law (No. 014-2024/ALT) on 9 July 2024, adopted unanimously by the Transitional Legislative Assembly. The law establishes binding security obligations for public administrations and the private sector, reinforces ANSSI as the central cybersecurity authority, and provides for sanctions. An implementing decree on approval of cybersecurity products and services was adopted in March 2025, confirming the law is in force.
Legal framework
Loi n° 014-2024/ALT portant sécurité des systèmes d'information (9 July 2024), enforced by the Agence Nationale de Sécurité des Systèmes d'Information (ANSSI), under the Ministry of Digital Transition, Posts and Electronic Communications
Key points: cybersecurity in Burkina Faso
Law No. 014-2024/ALT
The Transitional Legislative Assembly unanimously adopted the Law on Information Systems Security on 9 July 2024. The draft was approved in Cabinet in November 2023. The law text is published by the Ministry of Digital Transition (MDENP).
ANSSI as competent authority
The National Agency for Information Systems Security (ANSSI), created in 2013, is designated as the body responsible for applying the 2024 law. In July 2024 it was placed under the Ministry of Digital Transition to strengthen operational capacity.
Scope: public and private sectors
The law applies to public administrations and private-sector economic entities. It imposes strict security standards to protect sensitive data, ensure continuity of public services, and support the dematerialisation of administrative procedures.
Incident notification obligations
Electronic communications operators are required to notify ARCEP (the telecom regulator) of any security or integrity breach that significantly impacts network or service functioning, per Article 45 of Law 027-2010/AN of 25 May 2010 on electronic services and transactions. The 2024 law extends and reinforces such obligations across sectors.
Implementing decrees and licensing of cybersecurity products
On 5 March 2025, the Council of Ministers adopted a decree setting conditions and procedures for granting, renewing and withdrawing technical approvals for cybersecurity materials and software, implementing Law 014-2024. Commercial sale of cybersecurity products now requires prior approval.
ARCEP and DNSSEC / infrastructure security
ARCEP (telecom regulator) launched DNSSEC for the national '.bf' domain in December 2025 and has conducted audits to update the broader digital legal and regulatory framework, complementing ANSSI's cybersecurity mandate.
Sources
- mdenp.gov.bf/fileadmin/user_upload/storages/documents/administratifs/loi_014_syste
- anssi.bf/
- agenceecofin.com/securite/1007-120192-le-parlement-burkinabe-adopte-la-loi-sur-la-cybe
- ecofinagency.com/telecom/2811-45087-burkina-faso-advances-cybersecurity-with-new-infor
- coe.int/en/web/octopus/-/burkina-faso
- cybersecuritymag.africa/burkina-faso-se-dote-dun-cadre-reglementaire-pour-renforcer-son-cyber
- digitalmagazine.bf/2024/07/17/cybersecurite-au-burkina-faso-une-nouvelle-loi-pour-renfor
- laborpresse.net/materiels-et-logiciels-de-cybersecurite-desormais-la-commercialisatio
- dlapiperdataprotection.com/?t=breach-notification&c=BF
- jonesday.com/en/practices/experience/2024/12/arcep-updates-digital-legislative-and
- agenceecofin.com/actualites-numerique/0307-129743-le-burkina-intensifie-ses-efforts-en
- en.wikipedia.org/wiki/Autorit%C3%A9_de_R%C3%A9gulation_des_Communications_%C3%89lectro
Next for Burkina Faso: Starting a BusinessModerate
Next topicOrientation, not legal advice: verify against the primary sources linked above. Last verified 24 May 2026. Methodology & how to cite · State of Technology Regulation 2026