Togo IPDCP: Public Agencies Reminded of Data Protection Compliance

Togo’s Personal Data Protection Authority (IPDCP) convened representatives from ministries and state institutions in Lomé, Togo, on Tuesday, September 15, 2026, to reinforce compliance with the country's personal data laws. This meeting served as a crucial reminder to public agencies regarding their obligations concerning the collection and processing of personal data, underscoring the IPDCP's commitment to enhancing data protection across the public sector. The authority emphasized that protecting personal data is not merely a regulatory requirement but also a matter of digital sovereignty and public trust, as articulated by Bialabna Abaloutou, head of compliance at the IPDCP.

The IPDCP's proactive engagement with public agencies signals a significant shift towards robust enforcement of Togo's data protection framework. This initiative is rooted in Law No. 2019-014, adopted in October 2019, which provides the comprehensive legal and institutional framework for personal data governance in the country, specifically designed to safeguard privacy and individual rights amidst the expansion of digital services. The authority's focus on public sector compliance, including the mandate for ministries and institutions to appoint data protection contacts and the planned training and certification of these officials, indicates a structured approach to embedding data protection principles at an operational level. This move is likely to set a precedent for compliance expectations across all sectors.

Key parties involved in this development include the IPDCP itself, led by President Colonel Bédiani Belei, various Togolese ministries and state institutions, and their senior officials. For legal practitioners and businesses operating in Togo, this development necessitates immediate attention. Attorneys advising public sector clients must ensure their organizations are not only aware of but actively implementing the provisions of Law No. 2019-014, particularly concerning data handling practices and the designation of qualified data protection contacts. Private sector entities should view this public sector push as a strong indicator of future regulatory scrutiny and should proactively review their own data processing activities to align with the spirit and letter of the law. Monitoring the IPDCP's upcoming training and certification programs will be vital for understanding the evolving standards and best practices for data protection compliance in Togo. The outcome of specific enforcement actions or penalties resulting from this compliance push is not yet reported in the excerpt.