Senegal is taking a new step in consolidating its legal framework for cybersecurity and in protecting its strategic interests in the digital age (Image
The Senegalese National Assembly has approved a bill on the protection of critical information infrastructure (CII) as part of efforts to address the rise of cybercrime.
This comes a week after the Ministry of Telecommunications and digital Economy, represented by minister Samba Diouf, proposed the bill to the Inter-commission of the National Assembly.
Following a unanimous vote on Thursday, the West African country adopted Bill No. 25/2026 on the protection of CII and cybersecurity.
Through this move, Senegal is taking a new step in consolidating its legal framework for cybersecurity and in protecting its strategic interests in the digital age, noted a government statement.
In an era marked by an increase in cyber threats, the sophistication of attacks, and the growing dependence of states, businesses, and citizens on digital infrastructure, this bill aims to ensure the security and resilience of essential information networks and systems that are essential for the functioning of the country.
“Its purpose is clear: to preserve the global security of Senegal’s information infrastructure, to protect its sovereign interests, and to strengthen the state’s ability to anticipate, prevent, and respond to cybersecurity threats,” said the National Assembly.
It went on to say the bill sets a reference framework for information systems security, establishing, among other things, security standards and applicable norms for the state, individuals, and private organisations.
It also regulates the activities of CII operators, who are now subject to specific obligations under the supervision of the competent administrative authorities and the National Cyber Security Authority.
“The bill also establishes rules regarding the provision of cybersecurity services and products, while establishing an administrative and penal regime aimed at ensuring the effectiveness of the obligations provided by the legislation.”
The framework also covers an extended scope of information networks and systems that serve activities carried out in Senegal and are entirely or partially located on national territory, highlighted the government.
“Its scope may also extend to certain digital services provided in Senegal through equipment located abroad. These situations will be regulated through regulatory measures or through international cooperation agreements,” concluded the statement.
SecurityDigital transformationDigitisationDigital infrastructureDataDigital sovereigntyCybercrimeCyberattacksCybersecuritySenegal
