Cabinet CIFIP
Warning + formal notice (avertissement et mise en demeure). ARTCI (Autorité de Protection), 17 November 2022.
The facts
The decision arises from the authority's annual control programme, which listed Cabinet CIFIP for inspection in the 2021-2022 exercise. Sworn agents carried out an on-site control and drew up a report served on the firm. The control found no processing authorisation and no compliance with the data protection law, insufficient security measures including a single-factor login for the mailbox used as a bank of curricula vitae, no information notices or consent collection on the firm's website, unauthorised data transfers to France, and no designated data protection correspondent.
Orders and outcome
The authority issued a warning and a formal notice to bring processing into compliance within sixty days of receipt of the decision, ordered the firm to designate a data protection correspondent within thirty days, and stated that sworn agents would carry out controls to verify compliance, with further statutory measures to follow on non-compliance. Dated at Abidjan, 17 November 2022.
Cite this decision
Track Côte d'Ivoire enforcement
Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.