Senegal advances cybersecurity legislation to protect critical infrastructure

Senegal is moving toward formalizing its cybersecurity framework with the introduction of Bill No. 25/2026. The bill, which focuses on the protection of critical information infrastructure and digital security, was adopted in commission on August 13 and is scheduled for a plenary session vote on August 20.

The legislative push follows a series of high-profile cyberattacks against Senegalese institutions between late 2025 and mid-2026, including the Directorate General of Taxes and Domains, the Directorate of File Automation, the Public Treasury, and the Court of Auditors. Interpol has identified Senegal as one of the most targeted African nations by cybercriminals.

The proposed law aims to transition cybersecurity from a system of mere recommendations to one of enforceable obligations. Key provisions include the establishment of a National Cybersecurity Authority and a national Computer Emergency Response Team (CERT) with clearly defined legal powers.