The framework
Cote d'Ivoire's framework rests on Law 2013-450 on Personal Data Protection, with the ARTCI as the supervisory authority.
That puts Cote d'Ivoire in the global opt-in majority, where permission comes before processing and marketing waits for consent.
Key instruments
Law 2013-450 on Personal Data Protection
The telecom regulator ARTCI doubles as DPA under a 2013 law; registration and authorization are the operative duties.
Marketing and advertising
Consent-first with authorization duties. In practice that means consent before tracking or marketing outreach, documented well enough to show a regulator.
Cross-border transfers
Transfers abroad require authorization from ARTCI. Whatever the local mechanism, EU-origin data carries the GDPR's transfer chapter with it into this market.
Enforcement and penalties
Fines apply, and the authority can act against licences. Read the ceiling together with the authority's track record, which prices the risk.