Privacy Law at Algeria
Algeria's privacy and data protection framework is governed by Law No. 18-07, titled Law Relating to the Protection of Individuals in the Processing of Personal Data, which came into force on August 10, 2023. This law establishes comprehensive regulations for the processing of personal data by both public and private entities operating within Algeria or targeting Algerian residents.
Key Provisions of Law No. 18-07
1. Authorization and Declaration Requirements
Entities must either:
Declare their data processing activities to the **National Authority for the Protection of Personal Data (ANPDP).
*Obtain Prior Authorization from the ANPDP for processing operations that pose significant risks to individuals' privacy or involve sensitive data.Specific forms and procedures for these processes are available through the ANPDP's official portal.
2. Data Subject Rights
Individuals are granted the following rights concerning their personal data:
Right to Information Access to information about data processing activitie.
Right to Rectification Request corrections to inaccurate or incomplete data.
Right to Opposition Object to certain types of data processin.
Right to Access Obtain confirmation of data processing and access to personal data.
3. Cross-Border Data Transfers
Transferring personal data outside Algeria is permitted only in:
The destination country ensures an adequate level of data protection.
The transfer is authorized by the ANPD. Transfers that could compromise public security or national interests are prohibited
4. Data Security Obligations
Data controllers are required to implemen:
Technical and Organizational Measures To safeguard data against unauthorized access, loss, or alteration.
Incident Reporting Notify the ANPDP and affected individuals promptly in the event of a data breach.
5. Regulation of Sensitive Data
Processing of sensitive data, such as health or biometric information, is generally prohibited unles:
Explicit consent is obtained from the data subject.
The processing serves public interest, medical purposes, or complies with legal obligation.
🏛️ Enforcement and Penalties
*Administrative Sanctions
The ANPDP can impoe:
*Warnings and Notices: For non-compliane.
*Suspension or Withdrawal: Of processing authorizatios.
*Fines: Up to DZD 500,000 (approximately *€3,100).
*Criminal Sanctions
Serious violations may result in:
*Imprisonment: Ranging from *2 months to 5 years.
*Fines: Between DZD 20,000 and DZD 500,000 (approximately *€120 to €3,100).
📌 Conclusin
Algeria's Law No. 18-07 establishes a robust framework for personal data protection, aligning with international standad. Entities operating within or targeting Algeria must ensure compliance with its provisions to safeguard individuals' privacy and avoid potential sanctins.
RELATED Blog
0 comments