What Is Law No. 18-07 of 10 June 2018 on the Protection of Natural Persons in the Processing of Personal Data, as amended and supplemented by Law No. 25-11 of 24 July 2025?
In the 28 August 2026 review, Algeria’s governing framework is Law No. 18-07 of 10 June 2018, as amended and supplemented by Law No. 25-11 of 24 July 2025. The 2025 amendment repealed former Articles 10 and 11 and added a separate regime for criminal-justice processing. No later amendment was located in the official sources searched. Law No. 18-07 created the independent administrative authority ANPDP. Its president and members were appointed in 2022, an executive secretariat was established in 2023, and official materials show authorized personnel, active complaint and controller portals, and continuing organizational activity. The exact statutory installation day was not located, so the precise expiry date of Article 75’s transitional one-year compliance period is not stated. The framework provides information, access, rectification, updating, erasure, blocking, objection, consent-withdrawal, and commercial-prospecting protections. Criminal-justice processing may restrict, refuse, or delay rights where necessary and proportionate for investigations, proceedings, public or national security, or protection of others.
At a glance
- Full name
- Law No. 18-07 of 10 June 2018 on the Protection of Natural Persons in the Processing of Personal Data, as amended and supplemented by Law No. 25-11 of 24 July 2025
- Short code
- Law No. 18-07 + Law No. 25-11
- Jurisdiction
- Algeria
- Enacted
- 2018
- Last major update
- Law No. 25-11 of 24 July 2025 repealed former Articles 10 and 11 and added a separate criminal-justice processing regime; no later amendment was located
- Regulator
- Autorité Nationale de Protection des Données à caractère Personnel (ANPDP)
- Private right of action
- Yes
Scope, who Law No. 18-07 + Law No. 25-11 covers
Protected data
Data subject rights
Right to prior information about the controller, purposes, recipients, mandatory or optional responses, consequences of non-response, available rights, and intended foreign transfers
Right of access to confirmation of processing, purposes, categories, recipients, an intelligible copy, and available source information
Free right to update, rectify, erase, or block inaccurate, incomplete, unlawfully processed, or legally prohibited data
Right to objection for legitimate reasons, including an unconditional-style objection to commercial prospecting subject to statutory exceptions
Right to withdraw consent at any time
Rights exercisable by heirs in appropriate circumstances
Right to complain to ANPDP and seek interim measures and compensation from the competent court
Notable features
The 2025 amendment added a distinct criminal-justice processing regime that can restrict, refuse, or delay ordinary rights where necessary and proportionate. Rectification, erasure, blocking, or updating requests must generally be handled within 10 days, after which the person may apply to ANPDP. No numeric period for ANPDP’s complaint examination or final decision was located.
Enforcement & penalties
Regulator: Autorité Nationale de Protection des Données à caractère Personnel (ANPDP)
Penalties: Administrative measures include warnings, formal notices, temporary withdrawal for up to one year, definitive withdrawal of a declaration receipt or authorization, and administrative fines. Refusal without legitimate reason to provide information, access, rectification, or objection rights, or failure to make specified notifications, carries an administrative fine of 500,000 DA. Criminal penalties range from Article 58’s 6 months-1 year and 60,000-100,000 DA up to Article 67’s unlawful-foreign-transfer maximum of 1-5 years and 500,000-1,000,000 DA. Complementary penalties may include deletion of unlawfully processed data and confiscation. Attempt is punishable as the completed offence, and recidivist penalties are doubled.
Private right of action: A person harmed by processing may seek interim measures and compensation from the competent court. ANPDP decisions may be appealed to the Council of State. This judicial route exists alongside the ANPDP complaint mechanism; no fixed deadline for filing an ANPDP complaint or for ANPDP to issue a final complaint decision was located.
Relevance to data brokers
No data-broker-specific complaint, deletion, or suppression route was located. General access, rectification, erasure, blocking, and objection rights remain relevant to publicly consultable files, subject to statutory exceptions. A public beneficial-owner register may be available to competent authorities and the public, but no dedicated deletion, correction, or complaint route was located there.
Generate requests in under 60 seconds
Generate removal requests for 1,034 US/global profiles, $9
FAQ
What privacy rights exist under Algeria’s Law No. 18-07?+
The law provides information, access, rectification, updating, erasure, blocking, objection, and consent-withdrawal rights. It also protects against unsolicited automated commercial communications and permits complaints to ANPDP. Rights may be restricted for criminal-justice processing where the statutory conditions apply.
How long does an Algerian controller have to correct or erase data?+
The controller must make necessary rectifications, erasures, blocking, or updates within 10 days after being contacted. If the controller refuses or does not respond within 10 days, the person may apply to ANPDP. No numeric deadline for ANPDP’s final complaint decision was located.
Is there a data-broker deletion route in Algeria?+
No data-broker-specific complaint, deletion, or suppression route was located. The general rights framework may apply to publicly consultable files, but the report did not locate a dedicated broker or public-register route.
Official sources & citations
Other international privacy regimes
Law No. 18-07 + Law No. 25-11 sits in a global ecosystem of data-protection laws. Compare with other jurisdictions that shape cross-border data flows: