CHAPTER III
REQUIRED FORMALITIES FOR EXECUTING PERSONAL DATA
PROCESSING
Article 5:
Formality for declaration
With the exception of the cases set out under Articles 6, 11 and 12 of this
Supplementary Act, processing of personal data shall be subject to a declaration
to be made to the data protection Authority.
Article 6: Personal processing forthe public service
Personal data processing lI1at is carried out on behalf of the State, a public
establishment or local authority, or a body incorporated under private law and
running a public service, shall be decided upon by a legislative or regulatory Act
passed subsequent to the reasoned opinion ofll1e data protection Authority.
Such processing shall concem:
1) National security, defence or public security;
2) The prevention, investigation, detection or prosecution of criminal
offences or the application of criminal sentences or security measures;
3) Populatkln census;
4) Personal data that reveal directly or indirectly an individual's racial,
ethnic or regional origins, parentage, pomical, philosophical or
religious opinions, membership of a trade union, or which relate to his
health or sexual life;
5) Management of salaries,
pensions,
taxes,
duties,
and
other
assessments.
ArtiCle 7:
Formalities of requests for opinions and authorizations
Requests for opin'lons, notmcations, and other requests for authorisation must
specify:
1) the identity and address of the data controller or, if the latter is not
established on the territory of an ECOWAS or UEMOA Member state,
those of his duly mandated representa~ve;
2) the purpose(s) for which the data is intended
as general description of its functions;
to be processed, as well
3) the expected combinations or other forms of linkage with other
processes;
4) the type of personal data processed, its origin, and the categorfes of
d," "bj''''' ro."od by Ih.
pro:,',,,
~ ~ ~tL