Sénégal CDP: Alerte Contre Arnaques IA et Clonage Voix

• The Commission de protection des données personnelles (CDP) in Sénégal has issued an alert regarding a rise in AI-driven scams, including voice cloning and deepfakes.
• These fraudulent techniques are used to impersonate individuals to obtain money or confidential information, affecting Sénégal and the sub-region.
• Voice and image are protected personal data under Sénégal's Law n°2008-12, making unauthorized AI use illicit.
• The CDP advises citizens to verify suspicious communications, avoid urgent financial requests, and limit online exposure of personal content.
• Businesses and administrations are urged to enhance controls and employee awareness, and individuals can report illicit data use to the CDP.

Any recording, reproduction, or utilization of a person's voice or image through AI technologies without a legitimate legal basis and without the explicit knowledge or consent of the individual concerned constitutes an unlawful and unethical processing of personal data.

The Commission de protection des données personnelles (CDP) in Sénégal has issued a significant warning regarding a surge in fraudulent activities leveraging artificial intelligence (AI). This alert, disseminated via a communiqué on Friday, November 6, specifically highlights the increasing prevalence of voice cloning and deepfake technologies being used for illicit purposes. The institution aims to inform the public about these sophisticated new scam techniques that are gaining traction not only within Sénégal but also across the broader sub-region.

These advanced AI methods enable malicious actors to convincingly replicate an individual's voice or image, creating highly deceptive content. The primary goal behind such sophisticated impersonations is typically to defraud victims of money or to illicitly extract confidential information. Scammers achieve this by posing as trusted associates, colleagues, or partners, exploiting the victim's familiarity with the cloned identity to pressure them into compliance. The CDP's alert underscores the critical need for heightened awareness as these AI-driven scams, including "fraude IA clonage voix Sénégal" and "deepfake Sénégal données personnelles," become more sophisticated and widespread.

The CDP emphasizes that both an individual's voice and image are classified as personal data, affording them protection under Senegalese law. Specifically, Law n°2008-12, enacted on January 25, 2008, governs the protection of such data. Under this legal framework, any recording, reproduction, or utilization of a person's voice or image through AI technologies without a legitimate legal basis and without the explicit knowledge or consent of the individual concerned constitutes an unlawful and unethical processing of personal data.

This legal stance is crucial in addressing the challenges posed by "deepfake Sénégal données personnelles" and other AI-generated content used for deception. The law provides a foundation for individuals to seek recourse when their personal attributes are exploited. The "Commission protection données personnelles Sénégal" plays a vital role in upholding these protections, ensuring that the digital identity of citizens is not compromised by emerging technologies.

In response to these escalating threats, the Commission de protection des données personnelles urges all citizens to exercise extreme caution. Key recommendations include systematically verifying the identity of any caller or sender of a voice message that seems suspicious. The recommended procedure involves terminating the call or message and then directly contacting the individual using their known, usual phone number to confirm the authenticity of the communication.

The CDP also strongly advises against succumbing to any sense of urgency, particularly when confronted with unusual requests for money or sensitive information. Furthermore, individuals are encouraged to limit the public exposure of their personal voice recordings, videos, and other content on the internet. In situations of doubt, prioritizing official communication channels is paramount. These measures are vital in combating "cybercriminalité Sénégal IA" and protecting against sophisticated AI-enabled impersonations.

Beyond individual vigilance, the CDP has also directed its appeal towards businesses and public administrations. These entities are called upon to fortify their internal control procedures and to actively educate their staff about the inherent risks associated with AI-generated or falsified content. Strengthening these organizational defenses is critical to prevent corporate systems and employees from falling victim to advanced AI scams.

Crucially, the CDP has established a clear pathway for individuals who believe their voice or image has been collected or used improperly. Any person suspecting illicit data use can formally report the incident to the Commission de protection des données personnelles via its dedicated reporting platform. This mechanism ensures that victims of AI-driven fraud, including those affected by "fraude IA clonage voix Sénégal," have a means to seek redress and that the authorities can track and address these evolving forms of "arnaques IA" in Sénégal.

Lawyers and compliance officers in Senegal must advise corporate clients on strengthening internal controls, employee awareness, and data protection policies to mitigate risks associated with AI-driven fraud, specifically voice cloning and deepfakes, ensuring compliance with Law n°2008-12 on personal data protection. They should also be prepared to assist clients in reporting illicit data use to the CDP.

Source: Original reporting via the Commission de protection des données personnelles