AlgeriaLoi n° 18-07 relative à la protection des personnes physiques, droits de la personne concernée
Loi n° 18-07 du 10 juin 2018 arts. 34-36, telle que modifiée et complétée par la loi n° 25-11 du 24 juillet 2025, art. 7 (abrogation de l'art. 11) et art. 45 bis 1
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
What follows is LexLint's own research summary of this law, not legal advice.
In force since 11 August 2023.
A data subject rights rule binding public and private bodies.
As of 19 September 2026.
What it requires
- Answer a data subject's request for confirmation that you process their personal data and for an intelligible communication of that data, its purposes, categories, recipients and origin.
- Rectify, erase or lock inaccurate, incomplete or unlawfully processed personal data at no charge, within ten days of the data subject's request.
- Stop processing a person's personal data for direct marketing as soon as they object, and honour any other objection made on legitimate grounds unless a legal obligation or the terms of your ANPDP authorisation say otherwise.
- If you are the judicial authority, a body legally empowered to investigate offences, a judicial auxiliary or the prison administration processing personal data under Title V bis for the prevention or detection of offences, investigations, inquiries, criminal prosecutions or the execution of sentences, do not base a decision producing legal effects against a person solely on automated processing evaluating aspects of their personality.
What it reaches
Obligation class
Data subject rights, Disclosure
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
Article 34 gives a data subject the right to obtain from the controller confirmation of whether their personal data is processed and, if so, its purposes, categories and recipients, and communication in an intelligible form of that data and of any available information on its origin.
Article 35 gives a free right to have inaccurate, incomplete or unlawfully processed data updated, rectified, erased or locked, which the controller must action within ten days of the request, and article 36 gives a right to object on legitimate grounds to processing, and specifically to processing for direct marketing purposes, though that objection right does not apply where the processing meets a legal obligation or the authorisation for the processing expressly excluded it.
Loi n° 18-07 originally gave a data subject a right, at article 11, that no judicial decision assessing their behaviour and no other decision producing legal effects against them could rest solely on automated processing evaluating aspects of their personality; article 7 of loi n° 25-11 of 24 July 2025 repealed that article, along with article 10, without enacting a replacement of general application.
The only automated-decision protection loi n° 25-11 enacted is article 45 bis 1, which restates the same rule but only for personal data processed under the new Title V bis, which article 45 bis confines to processing for the prevention or detection of offences, investigations, inquiries, criminal prosecutions, or the execution of sentences, carried out by the judicial authority, a body legally empowered to investigate offences, a judicial auxiliary, or the prison administration.
Existing data controllers had one year from the installation of the Autorité nationale de protection des données à caractère personnel (ANPDP) to comply, which Algeria's state press agency reported took place on 11 August 2022, placing that compliance deadline on 11 August 2023.
When LexLint raises it
crawls_webdeploys_chatbotautomated_outreachhigh_risk_decisions
Read the law
Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.