Law: Law No. 007/PR/2015 on the Protection of Personal Data (only available to download in French here) ('the Law')

Regulator: Agence Nationale de Sécurité Informatique et de Certification Électronique ('ANSICE')

Summary: The Law establishes a general data protection framework, including general data processing notifications, data subject rights, security obligations, and controller/processor contracts. The Law does not, though, require breach notifications or data protection officer appointments. In addition to the Law, relevant provisions may be found in Law No. 008/PR/2015 on Electronic transactions (only available to download in French and Arabic here) and Law No. 009/PR/ on Cybersecurity and Cybercrime (only available to download in French and Arabic here). Chad also signed, on 14 June 2015, the African Union Convention on Cyber Security and Personal Data Protection, which sets out several requirements for jurisdictions to implement and harmonise approaches to data protection and cybersecurity, but it has yet to ratify the treaty.