Law: Law No. 2009-09 of May 22, 2009 Dealing with the Protection of Personally Identifiable Information (Law No. 2009-09), which has been supplemented by the Fifth Book of the Digital Code (only available in French here)

Regulator: Beninese data protection authority (APDP)

Summary: Law No. 2009-09 of May 22, 2009 Dealing with the Protection of Personally Identifiable Information (Law No. 2009-09) governs the protection of personally identifiable information in Benin and provides rules for the processing of personal information including data processing principles as well as lawful bases for processing. Law No. 2009-09 also established the APDP as the supervisory authority responsible for personally identifiable information protection.

Law No. 2009-09 is supplemented by the more detailed Digital Code in 2018. The Fifth Book of the Digital Code, on personal data protection, is directly influenced by the EU's General Data Protection Regulation (Regulation (EU) 2016/679) (GDPR). It regulates and clarifies several matters, such as joint controllership of data, conditions for consent, data breach notifications, processing for research and other purposes, and impact assessments. The Digital Code is one of the most comprehensive efforts to regulate data protection, and related matters, within the region.