Data protection & privacy law in Niger (2026)
Data protection in Niger: comprehensive law.
Niger has a comprehensive personal data protection law, Law No. 2022-59 of 16 December 2022, which repealed the earlier 2017 and 2019 legislation and aligns the framework more closely with international standards. The independent supervisory authority, the HAPDP, became operational in August 2020 and holds powers to receive complaints, conduct audits, and impose administrative, civil, and criminal sanctions. The law has been further amended by Law No. 2023-31 (July 2023) and two executive ordinances in 2024 to keep pace with technological evolution.
Legal framework
Law No. 2022-59 of 16 December 2022 on the Protection of Personal Data (as amended by Law No. 2023-31 of 4 July 2023 and Ordinances 2024-16 and 2024-29), enforced by the Haute Autorité de Protection des Données à Caractère Personnel (HAPDP)
Key points: data & privacy in Niger
Primary Legislation
Law No. 2022-59 of 16 December 2022 is the current principal law, replacing Law No. 2017-28 and its 2019 amendment. It was adopted unanimously by the National Assembly on 14 December 2022 and subsequently modified by Law No. 2023-31 of 4 July 2023 and Ordinances 2024-16 (26 April 2024) and 2024-29 (24 June 2024).
Supervisory Authority
The HAPDP (Haute Autorité de Protection des Données à Caractère Personnel) is an independent administrative authority with legal personality and financial autonomy, officially operational since 5 August 2020. It receives declarations and complaints, conducts on-site verifications through sworn agents, and maintains a public registry of data processing activities.
Seven Core Principles
Data controllers must comply with seven mandatory principles under the law: consent and legitimacy; legality and fairness; purpose limitation and relevance; data retention limits; accuracy; transparency; and confidentiality and security. Breach of these exposes controllers to sanctions under Articles 92-106.
Data Subject Rights
The law grants individuals rights including the right to be informed, right of access, right of rectification, and right of opposition regarding the processing of their personal data. The HAPDP is tasked with informing both data controllers and data subjects of their respective rights and obligations.
Enforcement Powers & Sanctions
The HAPDP may issue warnings, formal notices with compliance deadlines, provisional or permanent withdrawal of processing authorizations, and financial penalties. Administrative, civil, and criminal sanctions are available under Articles 92-106 of Law No. 2022-59.
2024 Amendments & Capacity Building
Two executive ordinances (2024-16 and 2024-29) further amended the framework in 2024 to address rapid technological change. In parallel, the HAPDP, supported by the World Bank-funded WURI project, conducted training across Niger's eight regional capitals between July and August 2024 to build awareness and compliance capacity.
Sources
- hapdp.ne/
- hapdp.ne/uploads/files/Loi-N%C2%B02022-59HAPDP.pdf
- mcnti.gouv.ne/ova_doc/loi-n2022-59-du-16-decembre-2022-relative-a-la-protection-des
- dataguidance.com/sites/default/files/loi_ndeg_2023-31_modifiant_la_loi_ndeg_2022-59.pd
- dataprotection.africa/niger/
- dlapiperdataprotection.com/index.html?t=law&c=NE
- blog.africadataprotection.org/en/2024/01/31/niger-control-or-awareness-the-challenges-of-the-hapdp/
- hapdp.ne/presentation
- rapdp.org/index.php/fr/Niger_HAPDP_journee_parlementaire_WURI
Next for Niger: Digital Payments & FintechLicensing regime
Next topicOrientation, not legal advice: verify against the primary sources linked above. Last verified 24 May 2026. Methodology & how to cite · State of Technology Regulation 2026