What Is Law No. 2019-014 of 29 October 2019 on the Protection of Personal Data?
Togo's Law No. 2019-014 of 29 October 2019, published in the Journal Officiel, regulates collection, processing, transmission, storage, use, and protection of personal data and applies to public and private processing, automated and non-automated files, and certain processing carried out in or using means located in Togo, subject to the law's exclusions. Article 55 creates the Instance de Protection des Données à Caractère Personnel (IPDCP) as an independent administrative authority with compliance-oversight, complaint-receipt, verification, and sanctioning powers. Rights include a written access request (Articles 39–44), an objection right including a free objection before first third-party disclosure or prospecting use (Articles 26 and 45), and rectification/completion/updating/locking/deletion of inaccurate or unlawfully retained data with a one-month controller response window (Article 46). Where a controller made data public, Article 47–49 requires reasonable measures to inform third parties of a deletion request; if the controller does not act within one month, the person may refer the matter to the IPDCP, which the law says decides within three weeks. This is a source-backed evidence profile. The controlling text is the French Journal Officiel PDF; no official English translation was located. No Togo-specific data-broker opt-out registry or private people-search removal route was located, though the national identity agency (ANID) and telecom regulator (ARCEP) each publish their own rights routes.
At a glance
- Full name
- Law No. 2019-014 of 29 October 2019 on the Protection of Personal Data
- Short code
- Togo Law 2019-014
- Jurisdiction
- Togo
- Enacted
- 2019
- Last major update
- No amending act located in the 9 October 2026 review; the IPDCP continues to operationalize under the 2019 law
- Regulator
- Instance de Protection des Données à Caractère Personnel (IPDCP)
- Private right of action
- Limited
- Statutory citation
- Law No. 2019-014 of 29 October 2019
Scope, who Togo Law 2019-014 covers
Protected data
Data subject rights
Written access request for confirmation of processing, copies, and origin information (Articles 39–44)
Free objection for legitimate reasons; free, express objection before first third-party disclosure or prospecting use (Articles 26 and 45)
Rectification, completion, updating, locking, or deletion of inaccurate, incomplete, or unlawfully retained data, with a one-month controller response (Article 46)
Erasure of publicly disclosed data with third-party notification, escalating to an IPDCP decision within three weeks if the controller does not act within one month (Articles 47–49)
Deceased-person data updates by identified heirs (Article 50)
Notable features
No separate data-portability right was located in the official text — the statutory rights are narrower and more specific than a generic GDPR template. Article 95 gave existing public-sector processing two years and other processing one year to comply from entry into force.
Enforcement & penalties
Regulator: Instance de Protection des Données à Caractère Personnel (IPDCP)
Penalties: The reviewed Journal Officiel text and IPDCP contact page for this research pass focused on rights and the complaint route rather than a consolidated fine schedule; verify current sanction amounts against the Journal Officiel before publication.
Private right of action: The IPDCP receives claims, petitions, and complaints under Article 56 via a contact form, email (contact@ipdcp.tg), or phone; the law’s specific erasure-of-public-data complaint is decided by the IPDCP within three weeks, but no general complaint-resolution SLA was located.
Relevance to data brokers
No Togo-specific data-broker opt-out registry or private people-search removal route was located. The law’s public-data erasure provisions are the closest located route for publicly exposed personal data, but do not guarantee that every broker must accept a request or that an outcome is guaranteed.
Generate requests in under 60 seconds
Explore 1,034 US/global data brokers
FAQ
How do I request deletion of publicly disclosed data in Togo?+
Under Articles 47–49, the controller that made the data public must take reasonable measures to inform third parties of your deletion request; if it does not act within one month, you may refer the matter to the IPDCP, which the law says decides within three weeks.
Does Togo’s law include a portability right?+
No separate data-portability right was located in the official 2019 text; do not assume one exists without a further source check.
Official sources & citations
Other international privacy regimes
Togo Law 2019-014 sits in a global ecosystem of data-protection laws. Start with these comparative frameworks, or visit the privacy research hub for the complete jurisdiction index: