The verdict in three sentences
An electronic health record (EHR) only has value if it is secure, traceable and interoperable — otherwise it is a legal risk disguised as a time saver. In 2026, compliance rests on four pillars: encryption at rest, role-based access, an access log and patient consent. A realistic budget ranges from 800,000 FCFA (simple single-practice EHR) to 3,000,000 FCFA (multi-site, interoperability, secure hosting).
The four pillars of compliance
In Senegal, law 2008-12 on personal data protection governs the processing of health data, treated as sensitive. Here is what that means concretely.
| Pillar | Requirement | 2026 implementation |
|---|---|---|
| Encryption at rest | Data unreadable if stolen | Encrypted database + files |
| Role-based access | Each sees their scope | Doctor / desk / admin roles |
| Traceability | Who saw what, when | Timestamped access log |
| Consent | Patient agreement | Form + register |
| Backup | No data loss | Daily encrypted backup |
| Hosting | Data sovereignty | Local hosting preferred |
The access log is often neglected yet it is the first piece of evidence requested in an audit or dispute.
Budget and components of a compliant EHR
Here is a 2026 order-of-magnitude estimate, by scope.
| Level | Scope | Budget FCFA | Timeline |
|---|---|---|---|
| Simple EHR | Patient file + history + role access | 800,000 - 1,300,000 | 4-6 weeks |
| Advanced EHR | + strong encryption + log + consent | 1,500,000 - 2,200,000 | 7-10 weeks |
| Interoperable EHR | + multi-site + standard export + API | 2,400,000 - 3,000,000 | 10-14 weeks |
| Recurring | Secure hosting + backup + support | 40,000 - 150,000 /month | ongoing |
Interoperability (exchanging data with a laboratory or another facility via a standard format) is the heaviest item, but it is also what avoids re-keying and losing information.
Mini case study
Aïssatou, who runs a medical centre in Dakar with 5 practitioners, stored her records on paper and in unencrypted files. After an advanced EHR costing 1,900,000 FCFA with encryption, role-based access and an access log, she cut the time to find a record from 6 minutes to under 30 seconds. Across 40 daily consultations, that is nearly 3.5 hours of practitioner time recovered each day, and above all a compliance posture that protects her in an audit.
Need a professional website?
Kolonell builds websites that attract clients, optimized for the Sénégalese market. Free quote in 2 minutes.
FAQ
Is an electronic health record mandatory?
It is not universally mandatory, but as soon as you store digital health data you are subject to law 2008-12 in Senegal, which requires security and consent.
Where should health data be hosted?
Local or sovereign hosting is strongly recommended for compliance and performance, at a cost of around 40,000 to 150,000 FCFA per month depending on volume.
What is encryption at rest?
It is the encryption of stored data: even if the server or a file is stolen, the data stays unreadable without the key. It is a baseline requirement for a compliant EHR.
How is patient consent managed?
A signed consent form and a register of agreements are built into the EHR, documenting authorisation to process the data.
Can a record be shared with a laboratory?
Yes, via interoperability and standard export formats, available on the interoperable tier estimated at 2,400,000 to 3,000,000 FCFA.
Let's talk about your project. We design your encrypted, traceable electronic health record, compliant with law 2008-12 and ready for interoperability. WhatsApp +221 77 596 93 33.
Mohamed Bah
Fondateur, Kolonell
Passionate about digital and entrepreneurship in Africa, Mohamed has been helping Sénégalese businesses with their digital transformation since 2020. Founder of Kolonell, he believes every SME deserves a professional and accessible online présence.
