Skip to content
World Watch

Data protection & privacy law in Togo (2026)

Data protection in Togo: comprehensive law.

Togo has a comprehensive, GDPR-style personal data protection law (Law No. 2019-014 of 29 October 2019) regulating the collection, processing, storage, transfer and protection of personal data, making it an early adopter among Francophone African states. The law established an independent supervisory authority, the IPDCP, whose organization was set by Decree 2020-111/PR and which became operational with the appointment of its president by decree on 30 September 2024. The regime grants data subjects rights (access, rectification, objection, erasure) and imposes prior declaration/authorization, security, and cross-border transfer obligations on data controllers.

Last verified Official sources first · MethodologyCompare Togo with other countries

Legal framework

Loi n° 2019-014 du 29 octobre 2019 relative à la protection des données à caractère personnel, supervised by the Instance de Protection des Données à Caractère Personnel (IPDCP)

Key points: data & privacy in Togo

  1. Comprehensive law in force

    Law No. 2019-014 of 29 October 2019 governs the collection, processing, transmission, storage, use and protection of personal data, and aims to ensure ICTs do not infringe individual freedoms or privacy. It was published in the Journal Officiel.

    jo.gouv.tg numerique.gouv.tg

  2. Supervisory authority (IPDCP)

    Article 55 of the law created the Instance de Protection des Données à Caractère Personnel (IPDCP), an independent administrative authority responsible for ensuring data processing complies with the law, with investigation, regulation and sanction powers.

    ipdcp.tg numerique.gouv.tg

  3. Implementing decree

    Decree 2020-111/PR governs the organization and functioning of the IPDCP, complementing the 2019 law to form the institutional framework for data protection.

    numerique.gouv.tg ipdcp.tg

  4. Authority now operational

    The IPDCP, created in 2020, began operationalization in 2024: Lieutenant-Colonel Bédiani Belei (a doctor of public law) was appointed president by decree dated 30 September 2024 to stand up the operational committee.

    numerique.gouv.tg togofirst.com

  5. Controller obligations

    Data controllers are subject to prior formalities (declaration to, or authorization from, the IPDCP depending on the processing), data security duties, and the IPDCP authorizes transfers of personal data abroad.

    ipdcp.tg droitmediasfinance.com

  6. Data subject rights

    The law protects individuals' privacy by guaranteeing control over their personal data from collection through processing, and the IPDCP handles citizen complaints and raises awareness of rights and obligations.

    ipdcp.tg republiquetogolaise.com

Sources

  1. jo.gouv.tg/sites/default/files/JO/JOS_29_10_2019-64E%20ANNEE-N%C2%B026%20TER.pdf
  2. numerique.gouv.tg/wp-content/uploads/2020/01/Loi-n-2019-014-du-29-octobre-2019-relative
  3. numerique.gouv.tg/le-gouvernement-adopte-le-decret-portant-organisation-et-fonctionneme
  4. numerique.gouv.tg/communique-de-presse-nomination-du-president-de-linstance-de-protecti
  5. ipdcp.tg/
  6. ipdcp.tg/ipdcp/presentation/
  7. ipdcp.tg/ipdcp/missions/
  8. republiquetogolaise.com/gestion-publique/2310-9870-numerique-l-instance-de-protection-des-don
  9. togofirst.com/fr/tic/2210-15036-togo-l-instance-de-protection-des-donnees-a-caracte
  10. ipdcp.tg/ipdcp/cadre-juridique/
  11. droitmediasfinance.com/index.php/actualites/droit-tech-fintech/54-togo-que-dit-la-loi-relati

Next for Togo: Digital Payments & FintechLicensing regime

Next topic

Orientation, not legal advice: verify against the primary sources linked above. Last verified 24 May 2026. Methodology & how to cite · State of Technology Regulation 2026