The Malian Data Protection Authority (Autorité de Protection des Données à Caractère Personnel – APDP) has imposed an administrative fine of 5 millions CFA francs (approximately 7,500 euros) on a private clinic. The sanction follows the clinic’s obstruction of an inspection mission carried out by the APDP regarding a video surveillance system that had been installed illegally, without prior authorization. The decision is based on Law 2013-015 of May 21th 2013 on the protection of personal data.
Obstructed inspection, resulting sanction
According to information provided by the APDP, the clinic hindered the authority’s agents by refusing to cooperate during an on-site inspection. Article 65 of Law No. 2013-015 of May 21th 2013, as amended, provides for sanctions ranging from 5 to 20 million CFA francs (approximately 7,500 to 30,000 euros) for any obstruction to the APDP’s activities, including refusal to provide information or documents relevant to the mission, concealment of evidence, or interference with an inspection.
In this case, the clinic was sanctioned for preventing access to a video surveillance system deemed non-compliant with current regulations. The APDP reminds that any installation of surveillance devices in a public or semi-public space must, under penalty of sanctions, be declared and authorized in accordance with personal data protection legislation.
A warning to public and private institutions
This decision reflects the APDP’s intention to assert its authority and strengthen compliance with personal data protection rules in Mali, particularly in the health sector, where sensitive data processing is common. Institutions, whether public or private, are required to comply with legal obligations governing the collection, processing, and retention of data.
The APDP emphasizes that this fine aims to remind all relevant actors of the importance of transparency and cooperation with competent authorities.