The framework
The operative statute in Mali is Law 2013-015 on Personal Data Protection, enforced by the APDP.
For media planning that means an opt-in posture, with consent capture built before campaigns launch.
Key instruments
Law 2013-015 on Personal Data Protection
A 2013 Francophone-model law with a functioning authority that publishes deliberations; enforcement is modest.
Marketing and advertising
Consent-first with declaration duties. In practice that means consent before tracking or marketing outreach, documented well enough to show a regulator.
Cross-border transfers
Transfers abroad require authorization from the APDP. In practice, the binding transfer rules for most international campaigns touching this market come from the origin jurisdiction of the data.
Enforcement and penalties
The law provides for fines and criminal penalties. How often the authority actually enforces sets the real price.