Algerian Law 18-07 on the protection of personal data imposes precise obligations on all businesses that collect data. WEBMINDS supports you in bringing your operations into compliance.
Do you collect emails, phone numbers or client data? Your business is subject to Law 18-07 and may face penalties for non-compliance. See the risks →
Enacted on 10 June 2018, Law 18-07 is Algeria's equivalent of the European GDPR. It regulates the collection, processing, storage and transfer of any personal data on Algerian territory.
It applies to any business or organisation that collects, processes or stores information that can directly or indirectly identify a natural person: name, email, phone, IP address, geolocation data, medical or financial data, etc.
The law creates the National Authority for the Protection of Personal Data (ANPDP), responsible for monitoring its application and sanctioning violators.
"This law applies to any processing of personal data carried out, in whole or in part, by automated means, as well as to non-automated processing of personal data contained in or intended to be included in a file."
"Any processing of personal data must be declared to the National Authority prior to its implementation."
Tick all boxes that apply to your business:
Law 18-07 has been in force since 2018. The ANPDP (National Authority) is operational and controls are progressively strengthening. Updating your compliance now protects you from any future penalties.
8 main obligations to respect for any business processing personal data in Algeria.
Any personal data file must be declared to the National Authority before it is put into operation.
Data collection requires the free, informed and explicit consent of the person concerned.
Data may only be used for the purposes precisely defined at the time of collection.
Data must not be retained beyond the time necessary for its purpose.
Technical and organisational measures to protect data against any unauthorised access or breach.
Right of access, rectification, objection and deletion of data by the persons concerned.
Clear and accessible information about data processing via a privacy policy on your site.
Compliant cookie banner with consent collection before any non-essential cookie is placed.
Failure to comply with Law 18-07 exposes your business to penalties that can seriously harm your operations and reputation.
Fines ranging from 100,000 DZD to 500,000 DZD depending on the seriousness of the infringement. Imprisonment possible for the most serious offences (Articles 39 to 44).
The ANPDP may require immediate cessation of non-compliant processing and destruction of illegally collected data.
Blocking of the service until full compliance, with direct impact on your revenue and image.
Publication of sanctions and loss of client trust in the event of data breach or failure to respect their rights.
Certain sectors receive heightened attention from the ANPDP due to the sensitivity of the data processed.
WebMinds carries out a free audit of your current situation and provides a report identifying the priority non-compliance issues to address.
Request my free audit →Complete support from initial audit to compliance certification.
Analysis of all your data processing: website, CRM, HR software, email campaigns, applications. Identification of risks and priority non-compliance points.
Creation of the register documenting all your data processing activities: purpose, legal basis, retention period, recipients and security measures.
Drafting or updating your privacy policy, legal notices and terms of use compliant with Law 18-07 and your sector requirements.
Integration of a consent management platform (CMP) on your website, with granular consent options and consent logging.
Update of all your forms (contact, registration, quote) with explicit consent checkboxes, information notices and links to the privacy policy.
Drafting of procedures for managing individual rights (access, rectification, deletion), breach notification procedure and staff training.
Support in preparing and submitting the declaration file for your processing activities to the National Authority for Personal Data Protection.
Continuous regulatory monitoring, updating your documentation in the event of legal changes and assistance in the event of an ANPDP audit or request.
Packages tailored to the size of your business and the complexity of your data processing.
For small businesses with simple processing: showcase site, client file, newsletter.
For businesses with multiple processing activities: e-commerce, CRM, HR, applications.
Outsourced Data Protection Officer for continuous compliance and permanent monitoring.
Free compliance audit within 48 hours. Detailed report with priority list and personalised action plan.