🇸🇳Senegal

Overview

Senegal has established itself as a proactive leader in the West African digital landscape, primarily guided by the 'Plan Sénégal Émergent' (PSE) and the more specific 'Sénégal Numérique 2025' strategy. The country's approach to Artificial Intelligence (AI) reached a significant milestone in 2023 with the launch of the National Strategy for Artificial Intelligence (Stratégie Nationale d'Intelligence Artificielle - SNIA). This strategy, developed by the Ministry of Communication, Telecommunications and Digital Economy (MCTN), outlines a comprehensive roadmap to leverage AI for socio-economic growth while ensuring technological sovereignty and ethical safeguards. The overarching philosophy is one of 'Responsible AI,' where innovation is balanced against the protection of fundamental rights and the promotion of local cultural values. Senegal's digital ecosystem is centered around the Dakar tech hub, which has seen a surge in AI-driven startups focusing on local challenges. The government views AI not merely as a technical tool but as a catalyst for structural transformation in key sectors such as agriculture, health, and education. By fostering a collaborative ecosystem involving the public sector, private enterprises, and academic institutions like the Université Cheikh Anta Diop (UCAD), Senegal aims to become a regional hub for AI research and development in Francophone Africa. This vision is supported by significant investments in digital infrastructure, including the national data center managed by Sénégal Numérique SA (SENUM SA), which provides the computational backbone for AI initiatives.

Regulatory approach

Senegal currently employs a hybrid regulatory approach that combines horizontal policy frameworks with sectoral integration. The National AI Strategy (SNIA) serves as the horizontal foundation, setting out eight strategic pillars that include human capital development, data infrastructure, and ethical governance. This strategy is largely 'soft law' in nature, providing guidelines and objectives rather than immediate punitive measures. However, it explicitly calls for the adaptation of existing 'hard law' to address AI-specific risks, such as algorithmic bias and automated decision-making. This approach allows the government to remain flexible in a rapidly evolving technological environment while providing a clear direction for stakeholders. The regulatory philosophy is increasingly risk-based, aligning with international trends. The government prioritizes the oversight of AI systems that impact personal freedoms, public safety, and national security. For instance, the Commission for the Protection of Personal Data (CDP) has taken an active role in scrutinizing how AI systems process the data of Senegalese citizens. Furthermore, the 2018 Electronic Communications Code provides a prescriptive framework for the infrastructure and services that support AI, ensuring that telecommunications operators maintain high standards of quality and security. This sectoral approach ensures that AI deployment in sensitive areas like finance and telecommunications is governed by established regulators who understand the specific nuances of those industries. The government also emphasizes 'technological sovereignty,' aiming to reduce dependence on foreign AI models by encouraging the development of local datasets and algorithms that reflect Senegalese linguistic and cultural diversity. The governance of AI in Senegal is centralized under the Ministry of Communication, Telecommunications and Digital Economy (MCTN). The MCTN is responsible for the overall implementation of the National AI Strategy and coordinates between various government agencies to ensure a unified approach to digital transformation. Within this ministry, specific departments focus on digital economy promotion and the oversight of emerging technologies. The MCTN also facilitates international partnerships, representing Senegal in global AI forums and ensuring that domestic policies align with international best practices. The Commission for the Protection of Personal Data (CDP) serves as the primary enforcement body for data-related AI issues. As an independent administrative authority, the CDP has the mandate to ensure that the processing of personal data by AI systems complies with Law No. 2008-12. This includes the power to conduct audits, receive complaints from citizens, and issue binding directives to AI developers and deployers. Additionally, the Regulatory Authority for Telecommunications and Posts (ARTP) oversees the technical standards and infrastructure that enable AI services, ensuring fair competition and consumer protection within the telecommunications sector. Another key player is Sénégal Numérique SA (SENUM SA), which manages the state's digital assets and infrastructure. SENUM SA plays a vital role in providing the secure hosting environments required for government AI projects, ensuring that public sector data is handled according to national security standards. These bodies work in a coordinated fashion, though the MCTN remains the primary policy architect.

Enforcement & penalties

Enforcement mechanisms for AI-related infractions in Senegal are currently derived from the penalties established in the Data Protection Law and the Electronic Communications Code. Under Law No. 2008-12, the CDP has the authority to issue administrative sanctions, which include formal warnings, cease-and-desist orders, and the withdrawal of authorization to process data. Financial penalties can be significant, ranging from 1 million to 100 million FCFA, depending on the severity of the breach and whether the entity is a repeat offender. These sanctions are designed to deter the unauthorized use of personal data in AI training sets and to ensure accountability for algorithmic harms. Criminal penalties are also applicable under the Cybercrime Law (2016-29) for more egregious violations. These can include imprisonment and heavy fines for activities such as the fraudulent manipulation of data, the deployment of malicious AI for cyberattacks, or the violation of national security protocols. The Electronic Communications Code also provides for sanctions against operators who fail to maintain the security and integrity of the networks that carry AI traffic. Appeals against administrative decisions made by the CDP or ARTP are typically handled through the Supreme Court (Cour Suprême), providing a layer of judicial oversight. As the legal framework evolves, the government is considering the introduction of specific civil liability rules for AI-generated damages, which would allow individuals to seek compensation through the traditional court system. This multi-tiered enforcement strategy ensures that both administrative compliance and criminal deterrence are addressed.

Data protection

Senegal was one of the first African nations to adopt a comprehensive data protection law with Law No. 2008-12. This framework is heavily influenced by early European data protection standards and the ECOWAS Supplementary Act on Personal Data Protection. It establishes the Commission for the Protection of Personal Data (CDP) as the watchdog. AI developers operating in Senegal must declare their data processing activities to the CDP and, in cases involving sensitive data (such as health or biometric data), obtain prior authorization. The law emphasizes the rights of data subjects, including the right to information, the right to object to certain types of processing, and the right to access and rectify their data. A significant aspect of the Senegalese framework is the regulation of cross-border data transfers. AI companies wishing to transfer data outside of Senegal must ensure that the recipient country provides an 'adequate' level of protection, or they must obtain specific authorization from the CDP. This is particularly relevant for AI models trained on international cloud platforms. Currently, the Senegalese government is in the process of modernizing this law to align it with the African Union's Malabo Convention and the principles of the GDPR. This reform aims to address modern challenges such as profiling, automated decision-making, and the unique risks posed by Large Language Models (LLMs). The CDP has also been active in issuing guidelines on the use of cookies and tracking technologies, which are often used to gather the behavioral data that fuels AI recommendation engines. The framework is built on the principles of transparency, proportionality, and security, ensuring that the digital rights of Senegalese citizens are protected as AI adoption grows.

Sector-specific rules

In the healthcare sector, AI applications are governed by a combination of data protection rules and medical ethics regulations overseen by the Ministry of Health and Social Action. The use of AI for diagnostics or telemedicine requires strict adherence to patient confidentiality and the 'informed consent' of the data subject. The National AI Strategy highlights health as a priority sector, specifically targeting the use of AI for epidemiological surveillance and the optimization of hospital management systems. Regulatory oversight ensures that AI tools do not replace human medical judgment but rather serve as decision-support systems. The financial sector is governed by the regulations of the Central Bank of West African States (BCEAO), which applies to Senegal as a member of the WAEMU. AI used in fintech, such as credit scoring algorithms or automated trading, must comply with BCEAO's standards on financial stability, transparency, and consumer protection. There are specific requirements to prevent 'algorithmic exclusion' in lending, ensuring that AI does not perpetuate financial discrimination. Additionally, the agricultural sector—a pillar of the Senegalese economy—is seeing the introduction of AI for precision farming. While there are fewer 'hard' regulations here, the government provides guidelines through the Ministry of Agriculture to ensure that AI-driven agricultural data remains under the control of local farmers and cooperatives. This sectoral approach allows for tailored regulation that addresses the specific risks and opportunities of AI in different parts of the economy, from the high-stakes environment of medical surgery to the data-intensive world of microfinance.

International alignment

Senegal actively aligns its AI regulatory development with international and regional standards. At the continental level, Senegal is a key participant in the African Union's (AU) Continental Strategy on AI, which emphasizes 'AI for Development' and the protection of African data sovereignty. The country is also a signatory to the Malabo Convention, which provides a unified framework for cybersecurity and data protection across Africa. By adhering to these regional standards, Senegal ensures that its AI policies are compatible with those of its neighbors, facilitating cross-border digital trade and collaboration within the ECOWAS region. On the global stage, Senegal has expressed strong support for the UNESCO Recommendation on the Ethics of Artificial Intelligence. The National AI Strategy (SNIA) explicitly references these UNESCO principles as a foundation for its ethical framework, focusing on human rights, diversity, and environmental sustainability. Furthermore, Senegal maintains close ties with the European Union and monitors the implementation of the EU AI Act to ensure that Senegalese AI startups can remain competitive and compliant when entering the European market. The government also participates in the 'Smart Africa' alliance, leading initiatives aimed at harmonizing digital regulations across the continent to create a single digital market. This international alignment is not just about compliance; it is a strategic effort to ensure that Senegal can influence global AI governance and protect its interests in an increasingly interconnected digital world.

What's next

The next 12 to 24 months are expected to bring significant legislative activity in Senegal's AI sector. A primary focus is the comprehensive reform of the 2008 Data Protection Law. The proposed update is expected to introduce specific provisions for 'High-Risk' AI systems, mandatory Data Protection Impact Assessments (DPIAs) for algorithmic processing, and enhanced rights for individuals regarding automated decisions. This reform will bring Senegal closer to the standards of the GDPR and the Malabo Convention, providing a more robust legal basis for the digital economy. Additionally, the MCTN is working on the establishment of a National AI Ethics Committee. This body will be tasked with developing specific ethical guidelines for the use of AI in the public sector and providing advisory opinions on the societal impact of emerging technologies. There are also discussions regarding the creation of a 'Regulatory Sandbox' for AI startups, which would allow companies to test innovative AI solutions in a controlled environment under the supervision of the CDP and ARTP. This initiative is intended to foster innovation while allowing regulators to gather the data necessary to draft more precise, evidence-based laws in the future. Another major project is the development of the 'National Data Lake,' which aims to centralize public sector data to provide high-quality training sets for local AI developers. This project will be accompanied by new data sharing protocols and security standards to ensure that the data is used responsibly and for the public good. These developments signal Senegal's commitment to moving from a policy-led approach to a more mature, legally-defined AI ecosystem.