",,"'Eo.,. ~ ~ ~t::tlO<oIf'1~ Personal data processing refers to any operation or set of operations carried out or not, with the assistance of processes that mayor may not be automated, and applied to data, such as obtaining, using, recording, organisation, preservation, adaptation, alteration, retrieval, saving, copying, consultation, utilisation, disclosure by transmission, dissemination or otherwise making available, alignment or combination, as well as blocking, encryption, erasure or destruction of personal data. CHAPTER II LEGAL FRAMEWORK FOR PERSONAL DATA PROTECTION Article 2: Aims Each Member State shall establish a legal framework of protection for prrvacy of data relating to the collection, processing, transmission, storage, and use of personal data without prejudice to the general interest of the State. Article 3: Scope The following shall be subject to this Slipplementary Act: 1) Collection, processing, transmission, storage, and use of personal data by any individual, by government, local authorities, and public or private legal entities; 2) Any automated or un-automated processing of data that is contained or may be included in a file, with the exception of those processes mentioned under Article 4 of this Supplementary Act: 3) Any processing carried out in an UEMOA or ECOWAS Member State; 4) Any processing of data related to public security, defence, investigation and pmsecution of criminal offences or State security, subject 10 such exemptions as are defined by specific pmvisions stipulated in other legal texts in force. Articls 4: Exclusions This Supplementary Act shall not apply to data pmcessing carried out by an individual in the exclusive frameworn of his personal or domestic activities. - 4-