CDP Sénégal: Alerte Arnaques IA, Clonage Voix et Deepfakes

• The Commission de protection des données personnelles (CDP) in Senegal has warned about a rise in AI-driven scams, including voice cloning and deepfakes.
• These scams aim to extract money or confidential information by imitating individuals, with cases reported recently in Senegal and the sub-region.
• Voice and image are considered personal data under Senegal's Law n° 2008-12, making unauthorized AI use for fraud an illicit processing.
• The CDP advises individuals to verify interlocutor identities, resist urgent demands, and limit public exposure of personal data online.
• Businesses and administrations are urged to strengthen control procedures and sensitize teams to these new forms of AI-driven fraud.

With the rapid advancement of AI tools capable of accurately replicating voices and images, the diligent verification of an interlocutor's identity has become an absolutely essential practice for mitigating the risks of deepfake escroquerie Sénégal and other AI-driven scams.

The Commission de protection des données personnelles (CDP) in Senegal has issued a significant warning regarding a notable increase in fraudulent activities leveraging artificial intelligence (AI). This alert specifically highlights the growing threats posed by voice cloning and deepfake technologies. Malicious actors are employing these sophisticated techniques to convincingly mimic the vocal patterns or visual appearances of individuals, with the express intent of deceiving their family members, professional colleagues, or business associates. The ultimate goal of these elaborate schemes is to illicitly obtain financial resources or sensitive confidential information from unsuspecting victims.

The regulatory body, in a communiqué released on Friday, November 6, confirmed that instances of this particular type of fraud have recently been documented not only within Senegal but also across the broader sub-region. Perpetrators are known to exploit existing voice recordings or images to fabricate digital content, creating the false impression that a familiar individual is making an urgent or critical request. This tactic often pressures victims into making hasty decisions without proper verification.

Underpinning the CDP's concerns is Senegal's robust legal framework for data privacy. The Commission protection données personnelles Sénégal explicitly states that both an individual's voice and their image are classified as personal data, as defined by Law n° 2008-12 of January 25, 2008, which governs personal data protection. Consequently, any act involving the recording, reproduction, or utilization of these personal attributes through artificial intelligence, conducted without a legitimate legal basis or without the informed consent of the individuals concerned, can be deemed an illicit and unfair processing of personal data.

This legal interpretation provides a critical foundation for addressing the misuse of AI technologies in deepfake escroquerie Sénégal and clonage voix IA Sénégal, underscoring the potential for legal repercussions against those who engage in such deceptive practices.

To counter these evolving threats, the CDP has outlined a series of crucial recommendations for the general public. A primary piece of advice involves the systematic verification of an interlocutor's identity whenever a phone call or voice message appears suspicious or out of character. The Commission protection données personnelles Sénégal strongly advises individuals to terminate such a call and then directly contact the supposed sender using their established, known phone number, rather than continuing the conversation with an unverified contact.

Furthermore, citizens are urged to resist any pressure to act with undue urgency, especially when confronted with unusual requests for money transfers or the disclosure of confidential details. Any such atypical demands should always be subjected to thorough prior verification. In situations where doubt persists, the CDP recommends relying on the official contact information for relevant organizations or government administrations. Another vital preventative measure involves the careful management of personal digital content; the Commission encourages individuals to limit the public exposure of their voice recordings, videos, and other personal data on the internet, and to exercise significant caution in all interactions with unknown parties.

Beyond individual citizens, the Commission protection données personnelles Sénégal has also extended its warning to encompass businesses and public administrations, highlighting the significant risks associated with content generated or manipulated by artificial intelligence. The regulatory body specifically calls upon these entities to reinforce their internal control procedures and to actively educate their personnel about these sophisticated new forms of fraude intelligence artificielle Sénégal. The CDP underscores the imperative for heightened discernment when evaluating incoming calls, voice messages, and videos, particularly when these communications are accompanied by urgent requests for financial transfers or sensitive personal information.

With the rapid advancement of AI tools capable of accurately replicating voices and images, the diligent verification of an interlocutor's identity has become an absolutely essential practice for mitigating the risks of deepfake escroquerie Sénégal and other AI-driven scams.

Lawyers and compliance officers in Senegal must advise clients on the heightened risks of AI-driven fraud, particularly concerning voice cloning and deepfakes. This includes ensuring compliance with Law n° 2008-12 on personal data protection, as illicit use of voice and image via AI constitutes unlawful data processing, and strengthening internal controls and employee training to prevent financial and data breaches from these sophisticated scams.

Source: Original reporting via SenePlus