Where we work · Benin
ISO and GRC certification consulting in Benin
Achieve ISO and GRC certification in Benin with Sterling: 8,100+ client engagements in 60+ countries, 20+ years.
- 21 standards, one team
- Accredited certification route
- Casablanca office team
- Effivity and Academy included
Sectors that ask for certification in Benin
- Cashew, cotton and agro-industrial processors and exporters
- Garment and textile manufacturers in industrial zones
- Food manufacturers and exporters
- Port, transit, logistics and warehousing operators
- Banks, electronic money issuers and payment firms
- IT, telecoms, e-commerce and outsourced-service companies
Clients include
ISO and GRC certification in Benin at a glance
Benin's certification and compliance demand follows a small set of public bodies and two export engines. The Digital Code, Law No. 2017-20, gives the APDP its data protection mandate and also creates ANSSI-Bénin to oversee information-system security. The ABSSA governs food safety along the whole chain, the ABMED regulates medicines and health products, and the BCEAO sets payment rules for banks and electronic money issuers across the West African Monetary Union. The Glo-Djigbé Industrial Zone lists cashew, cotton, garment, agro-processing and pharmaceutical industries among its key industries, while the Port Autonome de Cotonou handles transit cargo for neighbouring markets. The ANM is the national standards and metrology agency. Accreditation is regional: SOAC serves Benin and holds laboratory recognitions, so management-system certificates usually carry accreditation from another economy. Sterling's Casablanca office supports Beninese organisations, backed by 8,100+ client engagements in 60+ countries and 20+ years of practice, with Effivity and Sterling Academy included with the engagement.
ISO and GRC standards Sterling delivers in Benin
Each card opens Sterling's guide to the standard: what it requires, how certification or compliance works and what sets the time and cost.
Quality & operational excellence
Information security, cyber & cloud
Privacy & data protection
AI governance & digital trust
Environment, energy & climate
Health & safety
Governance, risk & resilience
Financial services, payments & AML
Food safety & agriculture
Healthcare, medical devices & life sciences
Laboratories, inspection & accreditation
Automotive, aerospace, rail & defence
Construction, energy, oil & gas
Regulators and laws that drive certification in Benin (12)
| Law or regulator | What it asks for | Standards it cites |
|---|---|---|
| Loi n° 2017-20 du 20 avril 2018 portant code du numérique en République du Bénin (Livre cinquième: de la protection des données à caractère personnel) Autorité de protection des données personnelles (APDP), which Book Five creates as an independent administrative structure with legal personality and administrative and financial autonomy, tasked with overseeing the application of the book and respect for privacy; its tasks include giving opinions, informing controllers and individuals, receiving declarations, granting or refusing authorisations, receiving complaints and checking processing | Applies to collection, processing, transmission, storage and use of personal data by individuals, the State, local authorities and public or private legal persons, and to controllers or processors established in Benin; it also reaches controllers not established in Benin when they offer goods or services to, or monitor the behaviour of, people in Benin. Processing is declared to the authority before it starts, and categories such as sensitive, offence, identification-number and biometric data, interconnection of files and transfers to a third State need its prior authorisation. Data must be processed lawfully, fairly and transparently, for specified purposes, kept accurate and not longer than needed, and secured with appropriate technical and organisational measures. Processing of racial, ethnic, political, religious, union, genetic, biometric, health and sex-life data is prohibited unless an exception applies. Transfers to a third State may take place only where the authority finds an equivalent level of protection. Controllers must report security breaches without delay to the authority and the person concerned, assess impact where risk is high, and public bodies and organisations with large-scale monitoring or sensitive-data processing must designate a data protection delegate. People have rights of information, access, portability, objection, rectification and deletion. | |
| Loi n° 2020-35 du 06 janvier 2021 modifiant la loi n° 2017-20 du 20 avril 2018 portant code du numérique en République du Bénin Autorité de protection des données personnelles (APDP) | The amending law rewrites the provision on the composition of the data protection authority, which it now sets at eight members drawn from the National Assembly, people qualified in electronic communications, a presidential appointee, a magistrate and a lawyer, led by a bureau of a president and a rapporteur. It also replaces the reference to the minister in charge of electronic communications throughout the Code. The substantive duties of controllers in Book Five are those of the Code itself. | |
| Electronic commerce and security-breach information duties in the Digital Code APDP for the data protection duties; ANSSI-Bénin for information-system security | Online sellers and platforms serving Beninese users carry the data protection duties of Book Five and a duty to inform users of security failures that may affect their data. | |
| Agence nationale de la sécurité des systèmes d'information (ANSSI-Bénin), created by the Digital Code as a public administrative body attached to the Presidency; the Agence des Systèmes d'Information et du Numérique (ASIN) runs the government's digital projects Information systems and network security, public bodies and private organisations | The Digital Code makes the security of information systems and networks across Benin the Agency's responsibility. Its tasks include following security plans and programmes in the public and private sectors, carrying out a general check of the security of information systems and networks of public and private bodies identified by regulation, centralising requests for help after security incidents, keeping a vulnerability database, issuing recommendations and running a cryptology commission. ASIN's site presents a digital security pole among its three areas of work. | |
| Agence Béninoise du Médicament et des autres produits de santé (ABMED), which took over from the Agence Béninoise de Régulation Pharmaceutique (ABRP) Medicines, health products and pharmaceutical establishments | The government portal reports that the ABMED keeps the pharmaceutical regulation mission and carries it out through pharmaceutical inspections, marketing authorisation of health products, vigilance, market surveillance, quality control, authorisation and control of clinical trials, and following the authorisation and installation of pharmaceutical establishments. | |
| Agence Béninoise de Sécurité Sanitaire des Aliments (ABSSA), a public scientific establishment under the minister in charge of agriculture, livestock and fisheries Food safety along the whole food chain | Décret n° 2012-113 du 08 mai 2012 portant création, attribution et fonctionnement de l'Agence Béninoise de Sécurité Sanitaire des Aliments sets its purpose as ensuring the sanitary safety of products at every link of the food chain in line with international requirements on food safety, with risk management, risk assessment and risk communication as its missions; Décret n° 2021-666 du 15 décembre 2021 approves its statutes. A government article from December 2022 describes a market-authorisation process for food products carried out with the ABSSA, the ANM and the Chamber of Commerce and Industry. | |
| Banque Centrale des Etats de l'Afrique de l'Ouest (BCEAO), the common central bank of the Union, whose member-state list and country page include Benin Banks, electronic money issuers and payment service providers in the West African Monetary Union | The BCEAO publishes the Union's payment-system rules, including Règlement n°15/2002/CM/UEMOA on payment systems, Instruction n°008-05-2015 on electronic money issuers, Instruction N°001-03-2021 on oversight of financial market infrastructures, payment means and services, and the uniform law on offences involving cheques, bank cards and other electronic payment instruments. | |
| Agence béninoise pour l'Environnement (ABE), created by the framework environmental law as a public establishment to implement the government's environmental policy Environment, industrial projects and land use | Loi n° 98-030 du 12 février 1999 portant loi-cadre sur l'environnement en République du Bénin requires a prior impact study for land use for agricultural, industrial or urban purposes and for research or exploitation works in the subsoil that could harm the environment, and gives the Agency a technical-opinion role in discharge limits and impact studies. | |
| Labour inspectorate, under the Labour Code Occupational health and safety | Loi n° 98-004 du 27 janvier 1998 portant Code du Travail en République du Bénin makes a health and safety committee compulsory in every establishment it covers and sets the committee's tasks: studying working conditions, checking that safety rules are applied, investigating serious accidents and occupational diseases, running an improvement programme, keeping accident statistics and preparing fire and rescue teams. The labour inspector may require a committee even below the usual headcount threshold. | |
| Autorité nationale de lutte contre la corruption (ANLC), the body created by the anti-corruption law Anti-corruption | Loi n° 2011-20 du 12 octobre 2011 portant lutte contre la corruption et autres infractions connexes en République du Bénin sets up a body whose missions include advising any public or private person or body on preventing corruption, checking that public institutions hold and apply procedure manuals, and reporting on corruption risks in the administration. | |
| Autorité de Régulation de l'Électricité (ARE) Electricity | The ARE's site describes an independent administrative institution created by decree in 2009 that watches over application of the electricity sector's laws, protects operators and consumers, and guards the quality and continuity of electricity service; it has recently reported on stronger control of off-grid mini-networks. | |
| Agence Nationale de Normalisation, de Métrologie et du Contrôle Qualité (ANM) National standards and metrology | The ANM's site describes an agency that implements national standardisation and metrology policy, establishes and sells national and international standards, and responds to requests for verification and calibration of measuring instruments. Its role here is standards development and metrology only. |
Accreditation and recognition
- West African Accreditation System (SOAC / Système Ouest Africain d'Accréditation): Regional accreditation body serving Benin among nine ECOWAS member states, according to UNIDO.
Look for a certification body whose accreditation scope covers your standard and sector, from a national accreditation body recognised under the international arrangements of Global ACI (Global Accreditation Cooperation Incorporated, formerly the IAF MLA). Sterling does not certify.
Tenders and procurement
- Public procurement code and the public procurement regulatory authority (Autorité de régulation des marchés publics (ARMP), under Loi n° 2020-26 du 29 septembre 2020 portant code des marchés publics en République du Bénin): The code sets the procedures for public contracts and creates the regulatory authority, whose decisions can be appealed before the administrative judge. Qualification and technical criteria are set in each tender notice, so a quality, environmental or security certificate matters only where a notice asks for one.
Economic zones
- Glo-Djigbé Industrial Zone (GDIZ): cashew processing, cotton spinning, weaving and garments, agro-processing, wood, electronics assembly, pharmaceuticals, electric vehicles
- Port Autonome de Cotonou: transit and logistics for neighbouring markets, containerised and bulk cargo, import-export
Sterling in Benin
Sterling delivers in Benin from its Casablanca office: one team from scoping to certificate, with Effivity ISO & GRC software and Sterling Academy access included. Sterling does not certify; certification decisions stay with independent bodies.
Questions Benin clients ask
Does Benin have a personal data protection law, and who enforces it?
Yes. Book Five of Law No. 2017-20 of 20 April 2018, the Digital Code, sets the rules, and the APDP supervises them. It receives declarations, authorises riskier processing, handles complaints and checks controllers. Law No. 2020-35 of 6 January 2021 later changed how the authority is composed. Confirm which formalities apply to your processing with counsel or the APDP.
Which body accredits certification in Benin?
Accreditation is regional rather than national. UNIDO lists Benin among the nine ECOWAS member states served by SOAC, and ILAC records SOAC's recognitions for calibration, testing and medical laboratories, with none recorded for management-system certification. For ISO 9001 or ISO 27001, ask the certification body which accreditation backs the certificate and check its scope.
Are certification audits in Benin conducted in French?
Mostly, yes. Legal texts, agency notices and customer documents are in French, so expect it for document review, contracts and interviews. If your auditors and staff share English or a local language, that can be agreed for particular sessions. Fix the audit language, any interpreter and the language of controlled procedures with the certification body at application.
Who regulates food safety for processors and exporters in Benin?
The ABSSA, created by Decree No. 2012-113 of 8 May 2012 under the agriculture ministry. Its stated purpose is the sanitary safety of products at every link of the food chain, in line with international requirements, through risk assessment, management and communication. A government article also describes a market-authorisation process for food products run with the ABSSA and the ANM.
Is there a national body for information security in Benin?
Yes. The Digital Code creates ANSSI-Bénin and makes the security of information systems and networks across the country its responsibility. Its tasks include following security programmes in the public and private sectors, checking bodies identified by regulation, receiving incident assistance requests and maintaining a vulnerability database. Check whether your organisation falls among those identified by regulation.
Which industrial zone is most relevant to exporters in Benin?
The Glo-Djigbé Industrial Zone is the one its own site features, with cashew processing, cotton and garment industries, agro-processing, wood, electronics assembly and pharmaceuticals among its key industries. The Port Autonome de Cotonou handles transit and cargo for hinterland markets. Buyers in those chains usually set their own supplier quality, food-safety and environmental conditions.
Start with a free discovery call
A Sterling consultant goes through your entities, your regulators and your target date with you. No proposal until the scope is agreed.
Sources
- Loi n° 2017-20 du 20 avril 2018 portant code du numérique en République du Bénin (Livre cinquième: de la protection des données à caractère personnel) — sgg.gouv.bj; apdp.bj (accessed 18 Oct 2026)
- Loi n° 2020-35 du 06 janvier 2021 modifiant la loi n° 2017-20 du 20 avril 2018 portant code du numérique en République du Bénin — sgg.gouv.bj (accessed 18 Oct 2026)
- Electronic commerce and security-breach information duties in the Digital Code — sgg.gouv.bj (accessed 18 Oct 2026)
- The Digital Code makes the security of information systems and networks across Benin the Agency's responsibility. Its tasks include following security plans and programmes in the public and private sectors, carrying out a general check of the security of information systems and networks of public and private bodies identified by regulation, centralising requests for help after security incidents, keeping a vulnerability database, issuing recommendations and running a cryptology commission. ASIN's site presents a digital security pole among its three areas of work. — sgg.gouv.bj; asin.bj (accessed 18 Oct 2026)
- The government portal reports that the ABMED keeps the pharmaceutical regulation mission and carries it out through pharmaceutical inspections, marketing authorisation of health products, vigilance, market surveillance, quality control, authorisation and control of clinical trials, and following the authorisation and installation of pharmaceutical establishments. — gouv.bj (accessed 18 Oct 2026)
- Décret n° 2012-113 du 08 mai 2012 portant création, attribution et fonctionnement de l'Agence Béninoise de Sécurité Sanitaire des Aliments sets its purpose as ensuring the sanitary safety of products at every link of the food chain in line with international requirements on food safety, with risk management, risk assessment and risk communication as its missions; Décret n° 2021-666 du 15 décembre 2021 approves its statutes. A government article from December 2022 describes a market-authorisation process for food products carried out with the ABSSA, the ANM and the Chamber of Commerce and Industry. — sgg.gouv.bj; gouv.bj (accessed 18 Oct 2026)
- The BCEAO publishes the Union's payment-system rules, including Règlement n°15/2002/CM/UEMOA on payment systems, Instruction n°008-05-2015 on electronic money issuers, Instruction N°001-03-2021 on oversight of financial market infrastructures, payment means and services, and the uniform law on offences involving cheques, bank cards and other electronic payment instruments. — bceao.int (accessed 18 Oct 2026)
- Loi n° 98-030 du 12 février 1999 portant loi-cadre sur l'environnement en République du Bénin requires a prior impact study for land use for agricultural, industrial or urban purposes and for research or exploitation works in the subsoil that could harm the environment, and gives the Agency a technical-opinion role in discharge limits and impact studies. — sgg.gouv.bj (accessed 18 Oct 2026)
- Loi n° 98-004 du 27 janvier 1998 portant Code du Travail en République du Bénin makes a health and safety committee compulsory in every establishment it covers and sets the committee's tasks: studying working conditions, checking that safety rules are applied, investigating serious accidents and occupational diseases, running an improvement programme, keeping accident statistics and preparing fire and rescue teams. The labour inspector may require a committee even below the usual headcount threshold. — sgg.gouv.bj (accessed 18 Oct 2026)
- Loi n° 2011-20 du 12 octobre 2011 portant lutte contre la corruption et autres infractions connexes en République du Bénin sets up a body whose missions include advising any public or private person or body on preventing corruption, checking that public institutions hold and apply procedure manuals, and reporting on corruption risks in the administration. — sgg.gouv.bj (accessed 18 Oct 2026)
- The ARE's site describes an independent administrative institution created by decree in 2009 that watches over application of the electricity sector's laws, protects operators and consumers, and guards the quality and continuity of electricity service; it has recently reported on stronger control of off-grid mini-networks. — are.bj (accessed 18 Oct 2026)
- The ANM's site describes an agency that implements national standardisation and metrology policy, establishes and sells national and international standards, and responds to requests for verification and calibration of measuring instruments. Its role here is standards development and metrology only. — anm.bj (accessed 18 Oct 2026)
- West African Accreditation System (SOAC / Système Ouest Africain d'Accréditation) — hub.unido.org; ilac.org; wacomp.ecowas.int (accessed 18 Oct 2026)
- Public procurement code and the public procurement regulatory authority — sgg.gouv.bj (accessed 18 Oct 2026)
- Glo-Djigbé Industrial Zone (GDIZ) — gdiz-benin.com (accessed 18 Oct 2026)
- Port Autonome de Cotonou — portdecotonou.bj (accessed 18 Oct 2026)
Talk to a consultant
Plan your certification with the Casablanca team.
Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.
southafrica@sterling-grc.com+1 201 263 4443 (global headquarters) · the Casablanca office replies by e-mail within one working day
What would you like to achieve?
Choose a starting point. The enquiry form takes about a minute.
Book my free discovery callContinue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice





