The framework
Mauritania regulates personal data through Law 2017-020 on Personal Data Protection, supervised by an authority provided by law.
For advertisers the consent posture matters most, and Mauritania sits in the opt-in bloc, where tracking and outreach need permission up front.
Key instruments
Law 2017-020 on Personal Data Protection
A 2017 statute whose supervisory machinery has been slow to materialize; obligations are formal more than practical.
Marketing and advertising
Consent-first on paper. In practice that means consent before tracking or marketing outreach, documented well enough to show a regulator.
Cross-border transfers
The law ties transfers abroad to authorization by the data protection authority.
Enforcement and penalties
The law provides for fines and criminal penalties. A ceiling means little until the authority uses it, so its docket is the better guide.