1. Our commitment
The National Identification Agency (ANID) is tasked with uniquely identifying every person living in Togo, assigning them a unique identification number (NIU), and enabling them to reliably prove their identity. This mission is based on trust: the trust you place in us by entrusting us with your data, and the trust that government agencies and organizations place in the identity we verify.
We process your data in accordance with Law No. 2019-014 of October 29, 2019 relating to the protection of personal data.
This policy explains to you, in simple terms, what we do with your data, who can access it, where it is hosted, how long we keep it, how we protect it, how to exercise your rights and who to contact if you have any difficulties.
Our commitments:
- Necessity: we only collect data that is strictly necessary for our missions, and optional data is indicated as such.
- Purpose: your data is used only for the purposes set out in section 4, and never for a use incompatible with them.
- Loyalty: we clearly inform you about how your data is used, with no hidden uses. It is never used to monitor you, and the national identification database is never transferred, either in whole or in part.
- Security: your data is protected by technical and organizational measures adapted to its sensitivity, reinforced for biometric data (section 9).
- Control: you can at any time find out what data we hold about you, have it corrected and exercise your other rights, free of charge (section 10).
2. Data controller and data protection officer
ANID is responsible for the processing of your data: it determines why and how it is processed, and it is accountable for it.
- Data controller: National Identification Agency (ANID), a public establishment with legal personality and financial autonomy, under the authority of the Presidency of the Republic, 4638, boulevard Gnassingbé Eyadéma, ARCEP building, 4th floor, Cité OUA, 01 BP 4908 Lomé, Togo.
- Data Protection Officer (DPO): ANID has appointed its DPO, in accordance with Law No. 2019-014, and has notified the Personal Data Protection Authority (IPDCP). The DPO ensures compliance with the law within the Agency and is your point of contact for any questions relating to your data.
- Contact: [email protected] — mail: Data Protection Officer, ANID, 01 BP 4908 Lomé, Togo.
3. Scope
This policy concerns you whenever ANID processes your data, in particular if you pre-register or register to obtain your NIU and e-ID card, if you are part of a household registered in the social register (RSPM), if you contact our services or if you visit our sites.
It covers the websites anid.gouv.tg, preinscription.anid.gouv.tg and monidentite.anid.gouv.tg, our registration centers and our call center (8285). Some services also have their own information notice, provided at the time of data collection; it clarifies this policy without contradicting it.
It does not apply to the data of our agents and job applicants: this is the subject of a separate information notice, available from the Human Resources Department.
4. The treatments we implement
Each processing operation pursues a specific purpose and is based on a legal basis. We do not use data from a processing operation for another incompatible purpose.
| Treatment | Purpose | Data concerned | Legal basis |
| Online pre-registration | Prepare your registration by entering your data in advance, reduce your time spent at the center and receive a reference number. | Civil status (surname, first names, sex, date and place of birth), address, contact details (telephone, email), login details, reference number | Your consent: this step is optional. |
| Registration, NIU generation and e-ID card | To uniquely identify you, assign you a National Identification Number (NIU), issue your card (identity verification upon delivery, reprinting in case of loss), facilitate your access to public services, and improve demographic data | Civil status (including parentage and nationality), address, contact details, photograph, fingerprints, iris scan, supporting documents, NIU | Your explicit consent (Article 8 of Decree No. 2022-094), obtained during registration, within the framework of the public service mission entrusted to ANID by Law No. 2020-009 of September 10, 2020 |
| Identity verification | Allowing an administration or an approved organization (bank, telecommunications operator, etc.) to confirm your identity when you request its services; this service may be billed to the organization. | NIU, verification result (identity confirmed or not), records of the request and, with your consent, only the data you agree to share | Public service mission (law no. 2020-009) and, for checks requested by a private organization, your agreement |
| Social Register of Persons and Households (RSPM) | Identify households and guide social programs | Household composition, living conditions, household identification number | Mission of public interest (decree relating to the RSPM) |
| Assistance and complaints | Responding to your requests and following up on your complaints received via 8285, in person, on the portal, or by email; calling you back and inviting you to collect your card | Name, first name(s), contact details, NIU or reference number (RID) if you provide it, purpose and description of the request, agent’s notes | Public interest mission |
Voluntary nature — registration in the national identification program is voluntary. It is based on your explicit consent, obtained at the time of registration, and is part of the public service mission entrusted to ANID. You retain all the rights described in section 10.
Biometric data — your fingerprints, irises, and photograph are used solely to ensure that a person has only one identity. This processing is subject to the required prior formalities with the IPDCP and benefits from our highest level of protection.
5. The principles we apply
- Specific purpose: each piece of data is collected for a stated use, and for that use only.
- Minimization: we only ask for the necessary data; optional fields are marked as such and their absence does not penalize you.
- Accuracy: you can have inaccurate or outdated data corrected at any time.
- Limited retention: we only keep your data for as long as necessary for the purpose for which it was collected.
- Confidentiality: only authorized agents, subject to a confidentiality obligation, have access to your data, and only for their mission.
- Transparency: you are informed at the time of collection, and this policy remains permanently accessible.
- Responsibility: we keep a record of our processing activities, we assess the risks of sensitive processing before implementation and we complete the required formalities with the IPDCP.
6. Who has access to your data
Your data is only shared with authorized recipients, and the national identification database is never transferred. Only the following recipients may receive it, each according to their respective area of responsibility:
- Our authorized services: registration centers, card personalization center, call center, IT services, each according to its responsibilities.
- Our technical service providers: they act solely on our instructions, within the framework of a contract that requires them to maintain confidentiality and security (Article 20 of Law No. 2019-014). They cannot use your data for their own purposes.
- Authorized administrations and bodies: only when a text authorizes them to do so, for example to verify your identity at your request or for access to RSPM social programs.
- Organizations using the identity verification service (banks, telecommunications operators, etc.): only when you request their services and with your consent, within the framework of an agreement concluded with ANID. They only receive confirmation of your identity and, if applicable, the strictly necessary data that you have agreed to share. They may be charged for this service: this fee covers the verification service and in no way constitutes a sale of your data.
- Judicial or administrative authorities: only upon request based on a legal text.
Every request from an authority is reviewed by our legal department, submitted to the Director General for a decision, and tracked. We only disclose the data strictly necessary for the request.
7. Transfers outside of Togo
The data processed for identification (national file and biometric data, pre-registration, cards) as well as that of the call center are hosted in Togo, in the national data center. They are not transferred outside the territory, including when our technical service providers are working on our systems.
8. Shelf life
Each data category has a retention period specified in our processing register. Upon expiry, the data is deleted, anonymized, or archived in accordance with applicable regulations.
| Data | Shelf life | Starting point |
| Pre-registration file | Until the registration is finalized, up to a maximum of 3 months | Submission of pre-registration |
| Identification and biometric data | Throughout the person’s life. Upon death, if the ANID is notified, the NIU is deactivated; the data is retained to prevent identity theft, under the conditions set by applicable regulations. | Registration |
| RSPM data | As long as the household is registered and can benefit from state social programs | Household registration |
| Requests and complaints | Three months after the request is closed, the phone number is deleted immediately upon closure; only the claim history (reference, subject, follow-up) is kept beyond that point, for monitoring purposes. | Application closed |
9. Security of your data
Protecting your data is essential for maintaining trust in the identity we provide. We implement technical and organizational measures proportionate to the sensitivity of the data, in accordance with Article 52 of Law No. 2019-014:
- access restricted to authorized agents, according to their role, and traceability of consultations;
- data encryption, both during transmission and storage, and protection of encryption keys by hardware security modules;
- enhanced protection of biometric data and control of the integrity of registration records;
- physical security of data centers and record centers;
- protection of networks and systems (firewall, protection against denial-of-service attacks, antivirus) and continuous monitoring of security events;
- confidentiality agreement signed by our agents and service providers;
- backups and recovery system in case of an incident;
- regular staff awareness training on data protection;
- secure identification cards and verification of your identity before they are issued;
- an information systems security policy, managed by our information systems security manager, who keeps it up to date.
In the event of a data breach likely to cause you harm, we will take immediate steps to contain it, inform the IPDCP and, where the situation requires, the individuals concerned.
10. Your rights and how to exercise them
10.1 Your rights
Law No. 2019-014 (articles 39 to 49) grants you the following rights, which you can exercise free of charge:
- Access: to know if we process your data and to obtain a copy of it.
- Correction: to have inaccurate data corrected or completed.
- Deletion: having data removed when its retention is no longer justified.
- Objection: You have the right to object, for a legitimate reason, to processing, within the limits of our legal obligations.
Special case of e-ID processing and the social register: before processing a request for erasure or objection, we will inform you in writing of its consequences, described below. Your request will only be processed after your written confirmation.
- Erasure and objection (e-ID): These requests result in the deactivation of your National Identification Number (NIU): you will no longer be able to prove your identity through the e-ID system. Your identification data will remain stored to prevent identity theft, under the conditions set out in applicable regulations.
- Deletion (RSPM): the deletion of your data results in your household being removed from the register and depriving you of the state aid that depends on it.
10.2 How to exercise a right?
Step 1: Write to [email protected] , by mail to ANID, 01 BP 4908 Lomé, Togo, or contact a registration center.
Step 2: Specify your request and attach proof of identity or your NIU, so that we can ensure that you are indeed the person concerned.
Step 3: We will respond within one month of receiving your complete request.
The 8285 call centre can guide you, but requests relating to your data are handled by the data protection officer.
11. Governance, complaints and updates
Governance: Data protection is managed at the highest level of the Agency: the Director General is responsible for it, the data protection officer monitors its application and reports regularly to the General Management.
Complaint: If you believe your rights have not been respected, first write to our data protection officer: we will work with you to find a solution. You can also contact the Personal Data Protection Authority (IPDCP), the supervisory authority in Togo, at any time: Agoè 2 Lions, Lomé, Togo — [email protected] — (+228) 22 25 13 34 / 70 36 33 33.
Updates: We review this policy at least once a year and whenever our data processing activities make significant changes. Previous versions are available upon request.
Version: 1.0 — effective as of 10/11/2026.
