Suspect a breach? Report it immediately — response within 1 hour.Report an incident
EBH Security
Contact us

Cybersecurity and Compliance in Benin

Security audits, penetration testing, and compliance for organizations operating in Benin, under the 2017 Digital Code.

Last updated — August 22, 2026

The local regulatory framework

Benin governs personal data protection and digital security through the 2017 Digital Code (Code du numérique), a unified text covering several areas of digital law. The Autorité de protection des données personnelles (APDP) oversees data protection, while the Agence béninoise des systèmes d'information et du numérique (ABSU-CP) handles matters related to information systems security.

Concrete obligations

Declaration of personal data processing activities with the APDP

Implementation of risk-proportionate security measures for personal data under the Digital Code

Notification of personal data breaches to the APDP

Compliance with information systems security requirements under the Digital Code

Adapted services

Governance, Risk & Compliance (GRC)

Security Audit

Penetration Testing

Managed SOC & MDR

Priority sectors

Financial services and mobile moneyPublic sector and governmentTelecommunications

Delivery modalities

Engagement mode

On-site missions in Cotonou, remote delivery for the rest of the territory

Working language

French

Regulatory coordination

Dedicated contact for interactions with the APDP

Local FAQ

Which text governs data protection in Benin?

The 2017 Digital Code, which unifies several aspects of Beninese digital law, with the APDP overseeing personal data protection.

What is the difference between the APDP and ABSU-CP?

The APDP oversees personal data protection; ABSU-CP handles matters related to information systems and digital security.

Is a declaration to the APDP always required?

The requirement depends on the nature and volume of data processed; we assess this based on your activity.

Do you work with the mobile money sector in Benin?

Yes, this sector is a priority given its criticality and exposure to fraud risk.

Do you support compliance with the Digital Code?

Yes, through our governance, risk and compliance service, covering diagnosis and operational implementation.

Get in touch