A framework that covers every project
In Senegal, the 2008 personal data protection law governs how information about people is collected, used and kept. The Personal Data Commission (CDP) oversees its application. A customer file and a mobile app are both in scope.
Collect less, justify better
Every piece of data should serve a clear purpose. A booking app does not need the same level of information as a medical record. The less you collect, the less you have to protect.
Know where the data is
Hosting, backups, subcontractors, SaaS tools: map the flows, including those leaving Senegal. Transfers abroad and sensitive data, such as health information, require particular precautions and formalities.
Plan for rights and incidents
People can ask to access, correct or delete their data. Design those journeys from the start, along with a procedure for data breaches. An up-to-date register makes every exchange with the CDP easier. Have your choices reviewed by a lawyer.
Turn a perspective into a first scope.
Our discovery phase connects these questions with your usage and constraints.
Explore our approach