Loi 2024/017 · LAW N. 2024/017 OF 23 DEC 2024 RELATING TO…

Cette loi camerounaise établit un cadre juridique pour la protection des données personnelles. Elle définit les principes fondamentaux, les droits des personnes concernées, et les obligations des responsables de traitement. Elle crée une Autorité de protection des données personnelles et prévoit des sanctions en cas de non-respect. La loi s'applique à tout traitement de données sur le territoire camerounais ou impliquant des personnes résidant au Cameroun.

REPUBLIC OF CAMEROON PEACE – WORK – FATHERLAND

PRESIDENCE DE LA REPUBLIQUE PRESIDENCY OF THE REPUBLIC SECRETARIAT GENERAL SERVICE DU FICHIER LEGISLATIF ET REGLEMENTAIRE LEGISLATIVE AND STATUTORY AFFAIRS CARD INDEX SERVICE COPIE CERTIFIEE CONFORME CERTIFIED TRUE COPY

2024/017 LAW N. ______ OF ______ 23 DEC 2024

RELATING TO PERSONAL DATA PROTECTION IN CAMEROON

The Parliament deliberated and adopted, the President of the Republic hereby enacts the law set out below:

PRESIDENCE DE LA REPUBLIQUE PRESIDENCY OF THE REPUBLIC SECRETARIAT GENERAL SERVICE OU FICHIER LEGISLATIF ET REGLEMENTAIRE LEGISLATIVE AND STATUTORY AFFAIRS DARD INDEX SERVICE COPIE CERTIFIEE CONFORME CERTIFIED TRUE COPY

PART I

GENERAL PROVISIONS

CHAPTER I

PURPOSE AND SCOPE

SECTION 1: This law relates to personal data protection in Cameroon. As such, it seeks to guarantee the fundamental rights and freedoms of individuals with regard to the processing of their personal data, regardless of data type, processing method or persons responsible.

SECTION 2: The following shall be covered by the provisions of this law:

processing of personal data by the State, regional and local authorities or any other natural or legal person;
processing of personal data relating to any person established or residing in, or transiting through Cameroon;
processing of personal data by a controller or processor established in Cameroon;
processing of personal data on a territory where Cameroonian law is applicable under international law or duly ratified international conventions.

SECTION 3: The provisions of this law shall not apply to:

processing of personal data by a natural person exclusively for the purposes of his/her personal or domestic activities, provided that such data are not intended for systematic communication to a third party or dissemination;
temporary copies made as part of the technical activities of transmission and access provisioning via a communication network for intermediate and transitory data storage purposes in order to secure, for the other service recipients, optimum access to the information transmitted;
the processing of personal data solely for literary or artistic purposes, for archival purposes in the public interest, for scientific or historical research, for statistical purposes or for journalistic purposes, regardless of the medium used, in compliance with the rules of professional ethics, in particular the security measures guaranteeing the confidentiality of journalistic sources and the moderation rules applicable to discussion forums set up by publishers of journalistic information.

SECTION 4: The processing of personal data by the competent security and defence authorities shall be governed by separate instruments.

CHAPTER II

DEFINITIONS

SECTION 5: For the purposes of this law and its implementing instruments, the following definitions shall apply:

Anonymization: process of modifying or deleting identifiable personal information from a set of data in order to render such data unattributable to specific individuals.

Authority: independent public body responsible for personal data protection.