Loi n° 2019-014, données sensibles

Loi n° 2019-014 du 29 octobre 2019, arts. 8, 21-25 (sensitive personal data)

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force.

A sensitive categories rule binding public and private bodies.

As of 19 September 2026.

What it requires

Obtain the Instance's prior authorization before processing genetic data, health research data, biometric data, or data on criminal offenses, convictions or security measures.
Do not collect or process data revealing racial or ethnic origin, filiation, political, religious or philosophical opinions, trade union membership, sex life, or health or genetic data, unless a listed exception applies, such as the data subject's written consent or a vital interest that prevents them from consenting.
Process data on criminal offenses, convictions or security measures only as a court, a public authority, a body managing a public service, or a legal auxiliary acting within your legal duties.
Process health data only on one of the law's listed grounds, keep it under the supervision of a health professional bound by professional secrecy, and collect it directly from the data subject except where collection elsewhere is necessary for the processing or the data subject cannot provide it themselves.

What it reaches

Obligation class

Prohibition, Consent, Biometric

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

Article 8 requires the Instance's prior authorization before processing genetic data, health research data, biometric data, or data on criminal offenses, convictions or security measures. Article 21 prohibits collecting or processing data revealing racial or ethnic origin, filiation, political opinions, religious or philosophical convictions, trade union membership, sex life, genetic data, or health data.

Article 22 lifts that prohibition where the data was manifestly made public by the data subject, where the data subject gave written consent, where the processing safeguards a vital interest the data subject cannot consent to protect, or on a short further list including a judicial, public interest, historical, statistical or scientific purpose.

Article 23 restricts processing of data on offenses, convictions or security measures to courts, public authorities, bodies managing a public service, and legal auxiliaries acting within their legal duties.

Article 24 makes health data processing lawful only on a listed ground such as the data subject's consent, requires it to be carried out under the supervision of a health professional bound by professional secrecy, and requires the data to be collected directly from the data subject except where collection elsewhere is necessary or the data subject cannot provide it.

When LexLint raises it

processes_biometrics
handles_health_records
crawls_web
trains_models

Read the law

Journal Officiel de la République Togolaise
numéro spécial du 29 octobre 2019, cited through an Internet Archive capture of the Ministry of the Digital Economy's PDF (numerique.gouv.tg)

archived copy

Read from a public archive copy, not the publisher directly. The publisher does not serve this page to automated readers, so a direct fetch was not an option here; how we access sources. Archived 2020. Publisher's page: https://numerique.gouv.tg/wp-content/uploads/2020/01/Loi-n-2019-014-du-29-octobre-2019-relative-a-la-protection-des-donnees-a-caractere-pers…

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app