AlgeriaLoi n° 18-07 relative à la protection des personnes physiques, transfert de données vers un pays étranger
Loi n° 18-07 du 10 juin 2018, arts. 44-45
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
What follows is LexLint's own research summary of this law, not legal advice.
In force since 11 August 2023.
A cross border transfer rule binding public and private bodies.
As of 19 September 2026.
What it requires
- Obtain the ANPDP's prior authorisation before transferring personal data to a foreign state, which the ANPDP grants only where that state's own protections are sufficient, and never transfer or communicate personal data abroad where doing so could harm public security or Algeria's vital interests.
- Where the destination state does not meet that sufficiency standard, rely on one of the article 45 derogations, such as the data subject's express consent, performance of a contract with them, or a bilateral or multilateral agreement to which Algeria is party.
What it reaches
Obligation class
Transfer
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
Article 44 conditions a transfer of personal data to a foreign state on the ANPDP's prior authorisation, granted only where that state ensures a sufficient level of protection for privacy and fundamental rights and freedoms with respect to the processing the data may undergo, a sufficiency the ANPDP assesses against that state's legal provisions, its applicable security measures and the processing's own characteristics, and prohibits any communication or transfer abroad that could harm public security or the State's vital interests.
Article 45 lists narrow derogations that permit a transfer to a state that does not meet those conditions: the data subject's express consent, safeguarding their life, preserving the public interest, establishing or defending a legal right, performing a contract with the data subject or pre-contractual measures at their request, a contract concluded in the data subject's interest between the controller and a third party, executing a measure of international judicial assistance, preventing, diagnosing or treating a medical condition, a bilateral or multilateral agreement to which Algeria is party, or the ANPDP's own authorisation where the processing meets article 2's conditions.
Existing data controllers had one year from the installation of the Autorité nationale de protection des données à caractère personnel (ANPDP) to comply, which Algeria's state press agency reported took place on 11 August 2022, placing that compliance deadline on 11 August 2023.
When LexLint raises it
crawls_webtrains_modelsprocesses_biometrics
Read the law
Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.