The framework
Chad's framework rests on Law 007/PR/2015 on Personal Data Protection, with the ANSICE as the supervisory authority.
That puts Chad in the global opt-in majority, where permission comes before processing and marketing waits for consent.
Key instruments
Law 007/PR/2015 on Personal Data Protection
A 2015 law supervised by the cybersecurity agency ANSICE; enforcement remains limited.
Marketing and advertising
Consent-first framework. In practice that means consent before tracking or marketing outreach, documented well enough to show a regulator.
Cross-border transfers
The law ties transfers abroad to authorization by the data protection authority.
Enforcement and penalties
The law provides for fines and criminal penalties. Read the ceiling together with the authority's track record, which prices the risk.