Articles 2 and 3: the Law covers any collection, processing, transmission, storage and use of personal data by individuals, the State, local authorities and public or private legal persons, automated or not where the data sit in a filing system, carried out in Senegal or wherever Senegalese law applies, and by a controller established abroad that uses processing means located in Senegal (other than transit), which must then designate a representative established in Senegal; processing for public security, defence, criminal matters and State security is covered subject to the Law's derogations. Purely personal or household processing not intended for systematic disclosure, and temporary technical copies for network transmission, are excluded.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.