Senegal’s National Assembly has approved new legislation to strengthen the protection of critical information infrastructure (CII) and reinforce the country’s cybersecurity framework amid growing cyber threats.
The legislation, Bill No. 25/2026 on the Protection of Critical Information Infrastructure and Cybersecurity, was unanimously approved by lawmakers on Thursday, following its presentation to the National Assembly’s Inter-commission by the Ministry of Telecommunications and Digital Economy, represented by Minister Samba Diouf.
The government described adopting the bill as an important step in strengthening Senegal’s legal and regulatory framework for cybersecurity while protecting the country’s strategic digital interests.
The legislation comes as cyber threats become increasingly sophisticated and as governments, businesses and citizens become more dependent on digital networks and systems. It seeks to strengthen the security and resilience of information infrastructure considered essential to the country’s functioning.
According to the National Assembly, the legislation is designed to protect Senegal’s information infrastructure, safeguard its sovereign interests and enhance the state’s ability to anticipate, prevent and respond to cybersecurity threats.
The new framework establishes security standards and requirements for information systems operated by public authorities, individuals and private organisations. It also introduces specific obligations for operators of critical information infrastructure, placing them under the oversight of relevant administrative authorities and the National Cyber Security Authority.
The legislation also establishes rules governing the provision of cybersecurity products and services, along with administrative and criminal measures intended to ensure compliance with the new requirements.
Its scope extends to information networks and systems supporting activities carried out in Senegal, whether they are located wholly or partially within the country’s territory.
The framework may also apply to certain digital services delivered in Senegal through infrastructure or equipment located outside the country. Such situations will be addressed through implementing regulations or international cooperation agreements.
The adoption of the bill marks a significant development in Senegal’s efforts to build a more resilient digital environment and strengthen protections around the information systems and infrastructure underpinning the country’s economy and public services.
