Hôtel TIAMA

Warning + formal notice (avertissement et mise en demeure). ARTCI (Autorité de Protection), 17 November 2022.

Record ID

ci-artci-2022-0800

Case reference

Décision n°2022-0800

Jurisdiction

Côte d'Ivoire

Regulator

ARTCI (Autorité de Protection)

Type

enforcement notice

Date decided

17 November 2022

Respondent type

private

Sector

hospitality

Violations

failure to bring processing into compliance with Loi n°2013-450 (art. 53), operating a processing without the required authorisation (art. 7), CCTV/video-surveillance and biometric data handling not compliant (RNPP/decree 2018-454)

Provisions cited

art. 7 Loi 2013-450, art. 14 Loi 2013-450, art. 16 Loi 2013-450, art. 53 Loi 2013-450, arts. 2 & 4 Décision n°2017-354, art. 3 décret n°2018-454 (RNPP)

Outcome

warning + formal notice (avertissement et mise en demeure)

Status

final

Source

Official document ↗

Source integrity

SHA-256 743206ae7f30298a…

Record verified

30 July 2026

The facts

The decision arises from the authority's annual control programme, which listed Hotel TIAMA, a 137-room hotel in the Plateau district of Abidjan, for inspection in the 2021-2022 exercise. Sworn agents carried out an on-site control at the hotel on 12 July 2022, covering the processing of client, staff and visitor data and the processing carried out by the hotel's processors. The control found no processing authorisation and no compliance programme, insufficient security guarantees including weak passwords without limited validity and password sharing among administrators, no automated system for deleting data past retention periods, weak physical protection of the server room, an unauthorised biometric device, missing video-surveillance signage, no procedure for data subjects' rights, and unauthorised data transfers.

Orders and outcome

The authority issued a warning and a formal notice to bring processing into compliance within sixty days of receipt of the decision, ordered the hotel to designate a data protection correspondent within thirty days, and stated that sworn agents would carry out controls to verify compliance, with further statutory measures to follow on non-compliance. Dated at Abidjan, 17 November 2022.

HOSPITALITY · TITLE-ONLY

Cite this decision

Track Côte d'Ivoire enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.