Digital security: The National Assembly debates rules for hosting state data abroad

Draft law no. 25/2026 concerning the protection of critical information infrastructure and digital security places data sovereignty at the heart of the parliamentary debate. Following its unanimous adoption in committee, the text will be submitted to the plenary session of the members of parliament this Thursday, August 20.

In the digital age, data has become a major strategic resource. For Senegal, the challenge lies in controlling and storing its most sensitive information. During committee work, members of parliament directly questioned the government about the safeguards in place when certain state data is entrusted to foreign companies, specifically mentioning files related to the production of national identity cards and driver's licenses.

The government has demonstrated a clear commitment to strengthening digital sovereignty. For public data, the principle remains its priority storage within the national territory. However, the legislation provides for exceptions: due to the country's technological dependence, the hosting or processing of certain data abroad may be authorized on an exceptional basis.

Senegal also asserts that it has the necessary technical capacity to host its data locally. This system will rely on the state's public infrastructure, as well as a network of approved private providers. Regarding private companies offering cloud services within the country, the National Cybersecurity Authority will be responsible for defining the standards required for their accreditation.

This approach reflects the desire to reduce external dependence and build a controlled digital environment. However, a question remains: to what extent can the country realize this ambition when many technologies still rely on foreign suppliers? This is one of the central points of discussion in plenary session, where a decisive step is being taken for the control of strategic national data.