Senegal
AI behavior law: bot and agent disclosure, crawler and training-data rules, automated-agent transactions, and algorithmic decision-making.
Summary
Senegal presents moderate risk. Law No. 2008-11 on Cybercrime (January 25, 2008) criminalises fraudulent access to or maintenance within a computer system (6 months to 3 years + fine of 1,000,000–10,000,000 CFA francs). Public pages reached without circumventing any technical barrier carry no clear criminal liability. Law No. 2008-12 on Personal Data Protection (January 25, 2008) established the Commission des Données Personnelles (CDP) and applies to any collection of personal data, including from publicly accessible sources — public availability does not constitute a lawful basis for processing. Copyright is governed by Law No. 2008-09 on literary and artistic property; databases receive protection only under the compilation-originality threshold (no EU-style sui generis right). Senegal is a member of OAPI (Bangui Agreement) and an ECOWAS member bound by the Supplementary Act A/SA.1/01/10 on personal data. Enforcement by CDP remains nascent; no reported web-scraping case law.
Automated-access legality
Carried forward from the crawler-law index. Governs whether automated clients may access public websites in this jurisdiction.
| Dimension | Value |
|---|---|
| Authorization test | without permission |
| Public-page carve-out | unsettled |
| Terms-of-service browsewrap enforceable | notice dependent |
| Terms-of-service clickwrap enforceable | yes |
| Copyright exception model | fair dealing narrow |
| Text and data mining — commercial status | unsettled |
| Text and data mining — opt-out mechanism | none |
| robots.txt legal weight | non binding notice |
| AI training-specific law | none |
| Privacy regime | Loi 2008-12 sur la Protection des Données Personnelles (CDP) |
| Trespass to chattels | not recognized |
Last reviewed: 2026-05-23. Confidence: medium. Not legal advice.