",,"'Eo.,.

~

~
~t::tlO<oIf'1~

Personal data processing refers

to any operation or set of operations carried

out or not, with the assistance of processes that mayor may not be automated,
and applied to data, such as obtaining, using, recording, organisation,
preservation, adaptation, alteration, retrieval, saving, copying, consultation,

utilisation, disclosure by transmission, dissemination or otherwise making
available, alignment or combination, as well as blocking, encryption, erasure or
destruction of personal data.

CHAPTER II
LEGAL FRAMEWORK FOR PERSONAL DATA PROTECTION
Article 2:

Aims

Each Member State shall establish a legal framework of protection for prrvacy of

data relating to the collection, processing, transmission, storage, and use of
personal data without prejudice to the general interest of the State.

Article 3:

Scope

The following shall be subject to this Slipplementary Act:
1) Collection, processing, transmission, storage, and use of personal data by
any individual, by government, local authorities, and public or private legal
entities;

2) Any automated or un-automated processing of data that is contained or
may be included in a file, with the exception of those processes mentioned
under Article 4 of this Supplementary Act:
3) Any processing carried out in an UEMOA or ECOWAS Member State;
4) Any processing of data related to public security, defence, investigation
and pmsecution of criminal offences or State security, subject 10 such
exemptions as are defined by specific pmvisions stipulated in other legal
texts in force.

Articls 4:

Exclusions

This Supplementary Act shall not apply to data pmcessing carried out by an
individual in the exclusive frameworn of his personal or domestic activities.

- 4-

Select target paragraph3