DjiboutiDigital Code, Book VII: Health-Data Hosting Security Certification
Loi n° 019/AN/23/9ème L portant Code Numérique, Livre Septième, Arts. 760 à 763
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
What follows is LexLint's own research summary of this law, not legal advice.
In force since 18 September 2025.
A sector security regimes rule binding public and private bodies.
As of 19 September 2026.
What it requires
- Hold a conformity certificate the national cybersecurity authority issues before hosting digital health data, if your activity is making available and maintaining the physical site, the physical or virtual infrastructure, or an application-hosting platform for a health-data information system, administering or operating such a system, or backing up health data.
- Expect the certificate's own issuance conditions to be set by a decree not located in this review.
- Expect the certificate to be withdrawn for a breach of the legislative or regulatory provisions governing digital health-data hosting, or of the certificate's own conditions.
If you get it wrong
Criminal exposureNo
Private right of actionNo
Criminal exposure note
No monetary or criminal penalty for hosting digital health data without the Article 760 certificate was located in this review; Article 763's own sanction is withdrawal of the certificate.
Who enforces it
Enforcement body
Autorité nationale en charge de la cybersécurité (issues and may withdraw the digital health-data hosting conformity certificate).
Settledness
- As of
- 19 September 2026
- Open questions
- Does the Article 760 certification duty reach a health-data host located outside Djibouti that hosts data for Djibouti's national health data system, a question the Articles reviewed here do not address?
What it reaches
Obligation class
Licensing, Security
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
Article 760 requires a host of digital health data to hold a conformity certificate the national cybersecurity authority issues before providing that hosting.
Article 761 names the activities that count as certifiable hosting: making available and operationally maintaining the physical site or the physical or virtual infrastructure hosting a health-data information system, making available and maintaining an application-hosting platform for it, administering and operating an information system containing health data, and backing up health data, a list a decree may extend.
Article 762 leaves the certificate's own issuance conditions to a decree proposed by the ministry in charge of the digital economy. Article 763 lets the cybersecurity authority withdraw the certificate for a breach of the legislative or regulatory provisions governing digital health-data hosting, or of the certificate's own conditions, under conditions a decree sets; that decree was not located in this review, and no separate monetary penalty for hosting without certification was located either.
When LexLint raises it
handles_health_records
Read the law
Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.