Algeria: Implemented Law Relating to the Protection of Individuals in the Processing of Personal Data (Law No. 18-07)

On 10 August 2023, the Algerian Law Relating to the Protection of Individuals in the Processing of Personal Data (Law No. 18-07) entered into force. The law applies to the processing of personal data by both public bodies and private individuals. Under the law, data processing requires either prior notification to the National Data Protection Authority or the Authority’s prior authorisation. In addition, the Law outlines data subjects' rights such as information, access, rectification, and opposition. The Law also establishes regulations on direct marketing, confidentiality, security, electronic communications-related processing, and cross-border data transfers. Violations of the law can result in administrative and criminal penalties.