Algeria: Implemented Law Relating to the Protection of Individuals in the Processing of Personal Data (Law No. 18-07) including data protection authority governance

On 11 August 2022, the Algerian Law Relating to the Protection of Individuals in the Processing of Personal Data (Law No. 18-07) has been partially implemented. Entities that were already processing personal data at the time of the law's promulgation were given a maximum period of one year from the date of the establishment of the National Data Protection Authority (ANPD). The law is applicable to the processing of personal data by both public bodies and private individuals. ANPD was established as an autonomous administrative body under the authority of the President of Algeria. The Authority is composed of experts selected by the President, magistrates, parliamentary representatives, and delegates from various ministries, thereby ensuring a diverse expertise in the field of personal data protection. The authority is responsible for ensuring compliance with data protection legislation, issuing authorisations, providing guidance to entities, handling complaints and monitoring the processing of personal data to ensure that it does not infringe upon individual rights, public freedoms or privacy. Furthermore, the ANPD is responsible for the administration of a national data protection registry, the formulation of regulations pertaining to data-related matters such as research, health, and surveillance, and the enforcement of security measures, including encryption, for the protection of personal data.