Data Protection & Cybersecurity
The firm supports organisations in protecting personal data and managing the legal risks associated with cybersecurity.
In 2015 Chad adopted a law on the protection of personal data and a law on cybersecurity and cybercrime. The National Agency for IT Security and Electronic Certification (ANSICE) is responsible for implementing them. Customer, employee, patient or beneficiary files: any organisation that processes personal data is concerned.
The firm helps organisations turn these obligations into concrete practice: knowing what data is collected, why, for how long and who has access to it; informing individuals; framing service providers; and responding properly to an incident. It also assists victims of data breaches or of offences committed online.
Issues We Handle
- Compliance with data protection requirements
- Privacy policies and data governance
- Security incident management
- Data-processing related contracts
Clients We Serve
- Companies
- Public and private institutions
- Organisations handling sensitive data
How We Work
Compliance assessment
Mapping of processing operations, gap analysis, prioritised action plan and assistance with formalities before the competent authority.
Documentation
Privacy policies, information notices, consent clauses, IT charters, registers and internal procedures.
Contracts and transfers
Data clauses in processing and hosting contracts, and framing of data transfers outside Chad.
Incidents and disputes
Legal handling of a data breach, filing complaints, content-removal requests, defence before the authority and the courts.
Our Approach
A combined legal and operational approach, working alongside the client’s technical teams.
Legal Framework
- Law No. 007/PR/2015 on the protection of personal data
- Chad’s 2015 legislation on cybersecurity and cybercrime
- National Agency for IT Security and Electronic Certification (ANSICE)
- African Union Convention on Cyber Security and Personal Data Protection (Malabo Convention)
- Criminal Code provisions on computer-related offences
Frequently Asked Questions
Yes, the firm advises on the obligations to meet and the measures to take in the event of an incident affecting data.
Very probably. As soon as an organisation collects or uses information that identifies individuals — customers, employees, beneficiaries, website visitors — it is processing data covered by the law.
Transfers of personal data abroad are regulated and require adequate safeguards. The conditions are checked according to the destination country, the nature of the data and the formalities required.
Contain the incident, preserve evidence, assess which data is affected and the resulting information obligations, then decide on next steps: complaint, notification of the individuals concerned, corrective measures. The firm coordinates the legal side with the technical teams.
This information is general in nature and does not constitute legal advice. Every situation calls for specific analysis: please contact the firm before making any decision.
Let’s discuss your situation
A first conversation helps define your need and outline the options available.
Related Areas
Telecommunications & Digital Law
Legal support for telecommunications and digital sector players.
Learn more →Business Criminal Law
Defending and advising companies and executives facing criminal law risk.
Learn more →Employment & Social Security Law
Advice and representation on employment relations and social protection.
Learn more →Commercial Contracts
Drafting, negotiating and securing all types of commercial contracts.
Learn more →