Law 18-07 Personal Data

Law No. 18-07, enacted in 2018, is Algeria's primary legislation for personal data protection. It sets rules for how public and private entities collect, process, store, and transfer personal data, while granting individuals rights such as access, correction, and objection.The law requires informed consent, data accuracy, and security safeguards. Cross-border data transfers are restricted unless the recipient country provides adequate protection. While it mandates the creation of a national data protection authority, this body remains non-operational as of 2025 due to implementation delays.The law applies to telecommunication providers, financial institutions, healthcare organizations, e-commerce platforms, government agencies, and other entities handling personal data in Algeria.