Togo IPDCP: Mandates Public Agency Data Obligations Compliance

• Togo's IPDCP convened public agencies on September 15, 2026, to reinforce compliance with personal data laws.
• The initiative is grounded in Law No. 2019-014, adopted in October 2019, which protects individual privacy and rights.
• Public institutions are mandated to appoint data protection contacts to liaise with the IPDCP and assist citizens with their rights.
• The IPDCP plans to train and certify these contacts, having already trained an initial group of 32 representatives in June 2026.
• This compliance push underscores the importance of digital sovereignty and public trust in data protection, according to IPDCP officials.

Protecting personal data is not only a matter of digital sovereignty, but also of trust.

The Togolese Personal Data Protection Authority, known as IPDCP, has intensified its efforts to ensure public sector entities adhere to national personal data legislation. This push aims to enhance compliance among various government bodies responsible for handling sensitive citizen information.

In a recent gathering held in Lomé on Tuesday, September 15, 2026, the IPDCP brought together high-ranking officials from a diverse array of ministries and state institutions. The attendees included chiefs of staff, secretaries-general, deputy chiefs of staff, and other key representatives. The primary objective of this assembly was to reiterate the critical responsibilities these bodies hold concerning the acquisition and handling of personal data. Colonel Bédiani Belei, the president of the IPDCP, presided over the opening of this significant session.

The foundation for these compliance efforts is Togo Law No. 2019-014, which was formally adopted in October 2019. This comprehensive legislation establishes the legal and institutional framework governing personal data within the country, serving as the bedrock for Togo's data sovereignty compliance initiatives. Its overarching purpose is to safeguard individual privacy and rights, particularly as the nation experiences an expansion in digital services.

Bialabna Abaloutou, who leads compliance efforts at the IPDCP, underscored the dual importance of this mandate, stating: "Protecting personal data is not only a matter of digital sovereignty, but also of trust." This perspective highlights the IPDCP's view that robust data protection is essential for both national autonomy in the digital sphere and maintaining public confidence in government operations.

A central directive from the IPDCP mandates that public agencies must ensure the robust protection of all information collected from citizens during the provision of public services. This obligation extends to every ministry and institution operating within the Togolese public sector, emphasizing a comprehensive approach to Togo public sector data privacy.

Furthermore, these governmental bodies are explicitly required to designate specific IPDCP data protection contacts. These appointed officials will serve as crucial liaisons with the IPDCP, facilitating communication and ensuring adherence to regulatory standards. Their role also encompasses assisting members of the public in exercising their data rights, thereby enhancing transparency and accountability.

To prepare these contacts for their vital responsibilities, the IPDCP has outlined plans for comprehensive training and certification programs. This structured approach aims to equip them with the necessary knowledge and skills. An initial cohort of 32 representatives from various sectors already underwent training in June 2026, marking a significant step in the authority's capacity-building efforts.

This concerted effort by the IPDCP signifies a heightened commitment to safeguarding citizen information and upholding fundamental privacy rights within the Togolese public sector. By reinforcing Togo IPDCP public agency data obligations, the authority aims to build a more secure digital environment for its citizens.

The emphasis on appointing and training data protection contacts, coupled with the clear legal framework of Law No. 2019-014, demonstrates a proactive stance towards data governance. This initiative is crucial for fostering public trust in governmental digital services and reinforcing Togo's digital sovereignty in an increasingly interconnected world.

Lawyers advising public sector entities in Togo should alert clients to the IPDCP's renewed focus on data protection compliance, specifically the requirement to appoint and train data protection contacts and review data processing practices under Law No. 2019-014. This indicates a heightened enforcement environment for data privacy in the Togolese public sector.

Source: Reporting based on recent dispatches from Lomé