Skip to main content

Algeria Law 18-07

Law 18-07 on the Protection of Individuals in the Processing of Personal Data

Algeria's data protection law with mandatory DPO requirement added by 2025 amendment and 5-day breach notification.

Jurisdiction

Algeria

Enacted

Jun 10, 2018

Effective

Aug 1, 2023

Enforcement

Autorité Nationale de Protection des Données à Caractère Personnel (ANPDP)

DPO mandatory under 2025 amendment

Journal Officiel Algeria

Why It Matters

Algeria's 5-day breach notification (vs GDPR's 72 hours) creates strict incident response timeline for AI chatbot security incidents.

Recent Developments

2025 amendment made DPO mandatory for all data controllers

At a Glance

Applies to

AI CompanionMental Health AppGeneral Chatbot

Who Must Comply

  • Data controllers and processors in Algeria
  • Entities processing data of Algerian residents
  • Cross-border data transfers from Algeria

Safety Provisions

  • Data Protection Officer mandatory (2025 amendment)
  • 5-day breach notification to ANPDP
  • Data controller registration required
  • Security measures for personal data
  • Cross-border transfer restrictions

Compliance & Enforcement

Penalties

criminal liability

Criminal liability

View on map

Algeria

Focus Areas

General regulation

Cite This

APA

Algeria. (2018). Law 18-07 on the Protection of Individuals in the Processing of Personal Data.

Last updated January 22, 2026. Verify against primary sources before relying on this information.