Eiffage Rail Dakar (ERD)

Formal notice (mise en demeure): correct all breaches within one month and suspend the processing until cdp authorisation is obtained. CDP, March 2025.

Record ID

sn-cdp-2025-0001

Case reference

Avis Trimestriel N°01-2025 (mise en demeure ERD)

Jurisdiction

Senegal

Regulator

CDP

Type

enforcement notice

Date decided

March 2025

Respondent type

private

Sector

transport

Violations

processing without prior formality/authorisation (vehicle geolocation), unlawful collection of personal data, infringement of the data subject's privacy

Provisions cited

Loi n°2008-12 du 25 janvier 2008

Outcome

formal notice (mise en demeure): correct all breaches within one month and suspend the processing until CDP authorisation is obtained

Status

final

Source

Official document ↗

Record verified

17 July 2026

Summary

Acting on a complaint by an employee (A.B.T) over the geolocation of his company vehicle, Senegal's CDP issued a formal notice (mise en demeure) against Eiffage Rail Dakar. The plenary session found the geolocation processing had been deployed without the prior formality required under the 2008 data-protection law, amounted to unlawful data collection, and infringed the data subject's privacy. ERD was ordered to correct all breaches within one month and to suspend the processing pending CDP authorisation. Reported in the CDP's first-quarter 2025 Avis Trimestriel. A follow-up on-site inspection on 16 July 2025 found the geolocation system uninstalled and the corrective measures implemented (reported in Avis Trimestriel N°03-2025).

GEOLOCATION · EMPLOYEE MONITORING · FORMAL NOTICE

Cite this decision

Track Senegal enforcement

Get decision alerts by email

Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.