Senegal’s Ministry of Telecommunications and Digital Economy has submitted a proposed Bill on the protection of critical information infrastructure and digital security to the Intercommission of the National Assembly, marking a significant step towards advancing the country’s digital sovereignty agenda.
According to the Ministry, the proposed legislation responds to growing dependence on digital systems across government, the economy and everyday life. As reliance on digital infrastructure increases, cyberattacks targeting critical systems could significantly disrupt essential services on which citizens depend.
The initiative comes amid growing concerns that Africa’s rapid digital transformation is outpacing the development of legal, regulatory and governance frameworks needed to protect the continent’s expanding digital ecosystem. This gap has increased exposure to increasingly sophisticated, cross-border cybercrime networks.
West Africa faces particular challenges, with rapid growth in connectivity occurring alongside high youth unemployment, large informal economies and the cross-border mobility of criminal networks. These factors are contributing to a complex and evolving cybersecurity landscape across the region.
The proposed Bill seeks to establish a comprehensive and risk-based legal framework, with security requirements proportionate to the level of risk associated with different information systems.
Under the proposed framework, ordinary networks and information systems would be subject to standard security requirements, while critical infrastructure would face enhanced measures. These would include increased monitoring, data backup, encryption of sensitive information, business continuity and disaster recovery measures, and regular resilience testing.
The legislation would also strengthen Senegal’s national cybersecurity architecture by establishing a National Cybersecurity Authority, a National Computer Emergency Response Team (CERT), sector-specific CERTs, and Cybersecurity Operations Services. These structures are intended to improve the country’s ability to monitor, detect and respond to cyber incidents at national and sectoral levels.
Beyond strengthening security, the Ministry said the Bill also has an economic objective. By raising cybersecurity and compliance requirements, the legislation is expected to support the development of a stronger domestic cybersecurity industry, create opportunities for Senegalese companies and start-ups, encourage the growth of accredited service providers and generate skilled employment. It could also help national cybersecurity champions emerge.
For citizens, the proposed legislation is intended to strengthen the protection of personal data, safeguard the continuity of essential services, improve the security of connected devices and build greater trust in digital technologies and services.
ICT Minister Samba Diouf described the initiative as an important milestone in strengthening Senegal’s digital sovereignty, resilience and security.
The Bill, he said, seeks to better protect strategic infrastructure, secure public data and strengthen national capacity to prevent and respond to cyber threats. At the same time, it aims to create an environment that supports the growth of Senegal’s cybersecurity ecosystem and encourages innovation.
The proposed legislation also aligns with the country’s New Technology Deal, Senegal’s broader digital transformation strategy, which aims to modernise the economy and public administration by 2034. By combining stronger cybersecurity protections with investment in local capabilities and innovation, the government is positioning cybersecurity as a central component of the country’s long-term digital transformation.
