Sénégal: Santé Numérique Face à un Vide Juridique pour les Données

• Senegal's digital health progress is hampered by a significant legal vacuum concerning specific health data protection.
• A consultation revealed 65.8% of the public is unaware of this legal gap, and 44.7% report their medical consent is never sought.
• Despite the general data protection law (2008-12), it lacks specific provisions for health data collection, storage, and sharing.
• Informal practices, such as sharing patient information via WhatsApp, highlight the risks in the absence of clear regulations.
• A digital health bill is currently under review, while advocacy groups like Transform Health Sénégal push for stronger legal frameworks.

Lawyers and compliance officers advising healthcare providers or digital health companies in Senegal must be aware of the significant legal vacuum regarding specific regulations for digital health data protection.

The advancement of digital health initiatives in Senegal is currently proceeding without a dedicated legal framework to safeguard sensitive medical information, creating a significant Sénégal santé numérique vide juridique. This regulatory gap poses considerable challenges for the protection données santé Sénégal. A recent consultation, spearheaded by the national Transform Health Sénégal coalition, brought to light a widespread lack of awareness regarding this issue among the populace. A striking 65.8% of individuals surveyed were unaware that no specific loi données médicales Sénégal exists to govern health data.

Further underscoring the vulnerability of patient information, the same consultation revealed that nearly half of the respondents, specifically 44.7%, indicated that their consent is never requested before their medical data is either recorded or shared. These findings were presented by Nathanael Louis Tete, the national coordinator for the "Mes Données, Notre Santé" campaign, during a webinar held as part of World Digital Health Week, which took place from November 2 to 8, 2026. The event's theme, "Digital transformation for universal health coverage," emphasized the need for coordinated efforts to accelerate progress in this domain.

The consultation also exposed a notable disparity in understanding between patients and healthcare professionals. While a majority of the public was unaware of the legal void, 47.8% of surveyed health professionals mistakenly believed that a specific law already regulated medical data protection. This perception gap highlights the urgent need for clarity and comprehensive guidelines. It is important to note that the results of this consultation, while insightful, were gathered from individuals mobilized through the campaign's networks and are not presented as a representative sample of the entire Senegalese population. The full report is still undergoing finalization.

On the ground, the informal methods of sharing medical information vividly illustrate the risks stemming from insufficient awareness and inadequate security measures. The practice of transmitting patient records or sensitive details through informal channels, such as WhatsApp groups, is a particular concern. Patients' anxieties extend beyond the threat of cyberattacks, which 54% of respondents identified as a risk; they are also significantly worried about their data being shared with individuals within their personal circles without authorization. These practices underscore the critical need for a robust legal and ethical framework to manage dossier patient informatisé Sénégal and other digital health records.

Despite the existing Sénégal santé numérique vide juridique, the nation is actively pursuing an ambitious digital transformation of its healthcare system. Key objectives include the widespread implementation of computerized patient files and the assignment of a unique identifier to every user by 2034. The National Health and Social Development Plan for 2023-2028 further outlines plans for developing computerized patient records, unique identification systems, and telemedicine services. Moreover, since August 2024, the Council of Ministers has initiated efforts towards the comprehensive digitalization of health data.

While these advancements promise greater efficiency, they simultaneously raise crucial questions about the safeguards in place for patients. The existing Law n° 2008-12, which pertains to the protection données personnelles, does categorize health information as sensitive data. However, it notably lacks a specific regime dedicated to the collection, conservation, and sharing of such data within the healthcare sector. According to Nathanael Louis Tete, a draft law specifically addressing digital health is currently under examination by the General Secretariat of the Government. Lawyers and compliance officers advising healthcare providers or digital health companies in Senegal must be aware of the significant legal vacuum regarding specific regulations for digital health data protection.

In response to these pressing challenges, the "Mes Données, Notre Santé" campaign was launched in Senegal in 2023. This initiative aims to amplify citizen demand for the protection données santé Sénégal, secure political commitments for an appropriate legal framework, and foster a sustainable coalition of civil society organizations. Now in its second phase, which commenced in December 2025, the campaign engages six organizations across five regions of the country.

Key partners in this endeavor include Les Éclaireurs, responsible for coordination and mobilization efforts, and Enda Santé, which facilitates dialogue with decision-makers. The campaign's activities are centered on promoting the confidentiality of medical information and empowering citizens to exercise their rights concerning their data. A tangible example of this work is seen in Saint-Louis, where approximately sixty students and teachers from a health institute formally signed a commitment to confidentiality, demonstrating a proactive step towards better data governance in the absence of a comprehensive loi données médicales Sénégal.

Lawyers and compliance officers advising healthcare providers or digital health companies in Senegal must be aware of the significant legal vacuum regarding specific regulations for digital health data protection. While the general data protection law (2008-12) applies, the absence of a dedicated framework means clients face heightened compliance risks, particularly concerning patient consent, data sharing practices (e.g., WhatsApp), and cybersecurity. They should proactively implement robust internal data privacy and security policies, advise on best practices to mitigate reputational and potential future legal exposures, and monitor the progress of the proposed digital health law.

Source: Original reporting via SenePlus