Loi n°007/PR/2015, principes directeurs du traitement des données (consentement, licéité, finalité, conservation)

Loi n°007/PR/2015 du 10 février 2015, arts. 1-15

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

In force since 10 February 2015.

A comprehensive regime rule binding public and private bodies.

As of 7 September 2026.

What it requires

Process personal data only with the data subject's consent, or, absent consent, only when indispensable to a legal obligation, a public-interest mission, a contract with the data subject, or the data subject's vital interest.
Collect and process personal data only for determined, explicit, and legitimate purposes, and do not process it later in a way incompatible with those purposes.
Keep personal data accurate and up to date, and retain it no longer than the purpose for which it was collected requires.
Inform the data subject about the processing of their personal data, and process it confidentially and with security measures against unauthorized access.

What it reaches

Obligation class

Consent, Disclosure, Retention

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

Article 1 sets the law's object as protecting private and professional life against the collection, processing, transmission, storage, and use of personal data, subject to public-order protection, and article 2 applies it to any such operation by a natural person, the State, local authorities, or a public or private legal person.

Article 7 makes processing lawful when the data subject consents, or, absent consent, when it is indispensable to a legal obligation, a public-interest or public-authority mission, a contract to which the data subject is party, or safeguarding the data subject's vital interest or fundamental rights.

Articles 8 through 10 require that collection and processing be lawful, fair, and non-fraudulent, and that data be collected for determined, explicit, and legitimate purposes and not processed incompatibly with them, and be adequate and not excessive for those purposes. Articles 11 through 15 require that data be retained no longer than the purpose requires, kept accurate, and that the controller inform the data subject and keep the data confidential and secure.

When LexLint raises it

crawls_web
trains_models
automated_outreach

Read the law

Loi n°007/PR/2015 du 10 février 2015, official text archived from the telecommunications and digital-economy regulator ARCEP's website
the archived copy is a scanned image PDF with no text layer, transcribed here by optical character recognition, confidence medium

archived copy

Read from a public archive copy, not the publisher directly. The publisher does not serve this page to automated readers, so a direct fetch was not an option here; how we access sources. Archived September 4, 2020. Publisher's page: https://arcep.td/sites/default/files/Loi-N%C2%B007-PR-2015.pdf

Back to the example · Lint your app