Loi n° 2008-11 du 25 janvier 2008 relative à la cybercriminalité (Law on Cybercrime) (Senegal)

Senegal's Law No. 2008-11 of 25 January 2008 on cybercrime is one of the earliest dedicated cybercrime statutes in West Africa. It was adopted by the National Assembly on 30 November 2007 and promulgated on 25 January 2008 as part of a package of digital-economy laws that also included the 2008 data protection law and legislation on electronic transactions. Rather than standing wholly apart, the law adapts the Senegalese penal framework to digital offending, inserting a new Title III into the Penal Code (articles 431-7 to 431-65) and corresponding provisions into the Code of Criminal Procedure. Substantively, the law criminalises attacks on automated data-processing systems, fraudulent access to and remaining within a system, interference with system functioning, and data interference, together with computer-related forgery and fraud. It also captures content offences, including child pornography and the dissemination of racist or xenophobic material, and a range of conduct connected to personal-data violations, reflecting its drafting alongside the data protection law. Procedurally, the law equips investigators and prosecutors with measures adapted to electronic evidence, including the search and seizure of computer systems and data, the real-time collection and preservation of data, and provisions facilitating international cooperation in cyber matters, important given the transnational, intangible and anonymous character of cybercrime that the law expressly invokes. Institutionally, enforcement runs through the ordinary criminal-justice system, supported by Senegal's data protection authority (the Commission de protection des données personnelles, CDP) for the data dimension and, more recently, national cybersecurity structures. The 2008 cybercrime law operates alongside Senegal's data protection statute, Law No. 2008-12 of 25 January 2008. Senegal has since pursued a broader reform of its digital-code framework, which reviewers should monitor for any amendment or replacement of the 2008 law. Source language: French.

1. 1One of West Africa's earliest dedicated cybercrime statutes; promulgated 25 January 2008 alongside the data protection law and electronic-transactions legislation
2. 2Inserts a new Title III into the Penal Code (arts. 431-7 to 431-65) and procedural provisions into the Code of Criminal Procedure
3. 3Substantive offences: fraudulent access to and remaining within automated data-processing systems, system interference and data interference, computer-related forgery and fraud
4. 4Content offences: child pornography and dissemination of racist or xenophobic material, plus offences connected to personal-data violations
5. 5Procedural powers: search and seizure of computer systems and data, real-time collection and preservation of data, and international cooperation
6. 6Enforced through the ordinary criminal-justice system, supported by the CDP for the data dimension
7. 7Operates alongside Senegal's data protection law (Law No. 2008-12 of 25 January 2008); broader digital-code reform to be monitored