Ivory Coast (UEMOA bloc)

Côte d'Ivoire's personal data regime rests on Law No. 2013-450 of 19 June 2013 on the Protection of Personal Data, a comprehensive omnibus statute. The Autorité de Régulation des Télécommunications/TIC de Côte d'Ivoire (ARTCI) — originally the telecoms/ICT sector regulator — was designated to exercise data-protection regulatory functions, publishing controller-facing reminders and privacy communiqués. Material and territorial scope details, and the precise registration/filing procedure, are only partially confirmed from secondary-source snippets; the operative Journal Officiel text was not directly retrievable in this run.

No primary-text confirmation was obtained in this run for Côte d'Ivoire's enumerated lawful bases, consent standards, or special-category rules under Law No. 2013-450. Regional pattern (French-influenced francophone African DP statutes of this era) typically enumerates consent, contract, legal obligation, vital interest and public-interest/legitimate-interest-style bases with heightened protection for health, biometric, and other sensitive data, but this was not independently verified for CI specifically in this run.

No CI-specific primary or secondary evidence on the subject-access, rectification/erasure, restriction/objection, portability, or response-deadline framework under Law No. 2013-450 was retrieved in this run. Given the omnibus nature of the statute and its designation of ARTCI as regulator, a rights framework analogous to regional peers is plausible but unverified here.

ARTCI has publicly reminded data controllers of compliance obligations, indicating an active accountability/enforcement posture, but granular DPIA, DPO, ROPA, joint-controller, security, breach-notification and retention provisions specific to CI were not independently verified in this run.

Côte d'Ivoire has not received or granted any EU adequacy decision. As a founding ECOWAS member state, Côte d'Ivoire is presumptively within scope of the ECOWAS Supplementary Act A/SA.1/01/10 on Personal Data Protection (a regional harmonisation instrument referenced by DataGuidance for comparator ECOWAS states such as Ghana and Cape Verde), though direct confirmation of Côte d'Ivoire's own ratification status for this Act and for the African Union Malabo Convention was not obtained in this run. No data-localisation mandate specific to CI was identified.

No CI-specific sectoral overlay evidence (banking/BCEAO-UEMOA financial data rules, health-sector rules, telecoms/ePrivacy, employment, credit-scoring, education, or insurance) was retrieved in this run. Côte d'Ivoire's membership in the West African Economic and Monetary Union (UEMOA/BCEAO) plausibly implies financial-sector data-handling instructions for mobile-money and banking operators, but this was not independently confirmed via search.

No CI-specific evidence was found on cookie/tracker consent regimes, dark-pattern prohibitions, opt-out signal recognition, clean-room rules, cross-context advertising, or direct-marketing suppression frameworks.

IAPP reporting indicates a 2024-initiated study on the challenges of AI, 5G and the metaverse for Côte d'Ivoire's digital economy, aimed at promoting inclusive, ethical and responsible adoption of emerging technologies, but this reflects a policy study rather than binding profiling/ADM/biometric legislation. Across the 39 African countries with data protection laws generally, the right not to be subject to solely automated decision-making is widely recognised, which — if CI's 2013 law follows the regional pattern — would suggest an Article-22-style analogue, though this was not independently confirmed against CI's specific statutory text.

No CI-specific evidence was retrieved on age-of-consent thresholds, parental-consent mechanisms, minor-profiling bans, education-setting rules, or dependent-adult protections under Law No. 2013-450.

ARTCI's documented activity (controller reminders, an app-privacy communiqué) indicates it exercises supervisory and public-facing enforcement-adjacent functions, but no specific fines, investigative-power statutes, penalty caps, collective-redress mechanisms, or private-right-of-action provisions for CI were retrieved. No enforcement decisions or fines in the last 12 months, and no developments in the last 180 days, were located for Côte d'Ivoire specifically.