Polyclinique FARAH

Warning + formal notice; extra-ecowas transfers held illegitimate; 60 days to cure. ARTCI (Autorité de Protection), 13 September 2023.

Record ID: ci-artci-2023-0951
Case reference: Décision n°2023-0951
Jurisdiction: Côte d'Ivoire
Regulator: ARTCI (Autorité de Protection)
Type: enforcement notice
Date decided: 13 September 2023
Respondent type: private
Sector: healthcare
Violations: unlawful cross-border data transfer, processing without authorisation
Provisions cited: arts. 49-53 Loi 2013-450, art. 17 Décision 2021-0676
Outcome: warning + formal notice; extra-ECOWAS transfers held illegitimate; 60 days to cure
Status: final
Source: Official document ↗
Record verified: 11 July 2026

Summary

A control found the clinic's business software developed and maintained in France by a provider, with patient-adjacent data transferred outside ECOWAS without transfer authorisation and the underlying processing itself unauthorised. The Autorité held the third-country transfers illegitimate and issued a warning with formal notices to correct all non-conformities and reach compliance within 60 days.

HEALTHCARE · CROSS-BORDER-TRANSFER · VENDOR-RISK

Cite this decision

ARTCI (Autorité de Protection) (Côte d'Ivoire), Décision n°2023-0951, enforcement notice of 13 September 2023. African Data Protection Enforcement Tracker, Law Lab Africa Research, https://research.lawlab.africa/tracker/cote-d-ivoire/artci-autorite-de-protection/2023/polyclinique-farah-france-transfers/ (accessed 22 July 2026).

Track Côte d'Ivoire enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.