The framework
Togo regulates personal data through Law 2019-014 on Personal Data Protection, supervised by the IPDCP.
For advertisers the consent posture matters most, and Togo sits in the opt-in bloc, where tracking and outreach need permission up front.
Key instruments
Law 2019-014 on Personal Data Protection
A 2019 law with its authority (IPDCP) installed in 2024; obligations are formal but enforcement is young.
Marketing and advertising
Consent-first framework. In practice that means consent before tracking or marketing outreach, documented well enough to show a regulator.
Cross-border transfers
Transfers abroad sit under the data protection authority's supervision.
Enforcement and penalties
The law provides for fines and criminal penalties. A ceiling means little until the authority uses it, so its docket is the better guide.