Law: Law No. 007/PR/2015 on the Protection of Personal Data (only available to download in French here) ('the Law')

Regulator: Agence Nationale de Sécurité Informatique et de Certification Électronique ('ANSICE')

Summary: The Law, which was enacted in 2015, establishes a general data protection framework, including general data processing notifications, data subject rights, security obligations, and controller/processor contracts. The Law does not require breach notifications or data protection officer appointments. In addition to the Law, relevant provisions may be found in Law No. 008/PR/2015 on Electronic transactions (only available to download in French and Arabic here) and Law No. 009/PR/2015 on Cybersecurity and Cybercrime (only available to download in French and Arabic here). Chad also signed, on June 14, 2015, the African Union Convention on Cyber Security and Personal Data Protection, which sets out several requirements for jurisdictions to implement and harmonize approaches to data protection and cybersecurity, but it has yet to ratify the treaty.