Law / Tunisia

Organic Act on the Protection of Personal Data, cross-border transfer

Loi organique n° 2004-63, arts. 50-52 (transfert des données à l'étranger)

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force since 30 July 2004.

A cross border transfer rule binding public and private bodies.

As of 19 September 2026.

What it requires

  • Never transfer or communicate personal data to a foreign country in a way capable of harming public security or Tunisia's vital interests.
  • Before transferring personal data abroad, confirm the destination country assures an adequate level of protection, assessed against the data's nature, the processing's purpose and duration, and the safeguards in place.
  • Obtain the INPDP's prior authorization before any transfer of personal data abroad, and route that request to the family court judge instead where the data concern a child.

What it reaches

Obligation class

Transfer, Access restriction

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

Article 50 bars communicating or transferring personal data to a foreign country in any case capable of harming public security or Tunisia's vital interests, a bar no authorization can cure.

Article 51 permits transferring personal data undergoing or destined for processing only to a country that assures an adequate level of protection, assessed against the nature of the data, the purpose and duration of the processing, the destination country, and the safeguards in place, and requires every transfer to otherwise meet the Act's conditions.

Article 52 makes the INPDP's prior authorization mandatory for every transfer of personal data abroad, requires the INPDP to decide within one month of the request, and routes the request to the family court judge rather than the INPDP where the data to be transferred concern a child.

When LexLint raises it

  • crawls_web
  • trains_models
  • deploys_chatbot
  • processes_biometrics

Read the law

Full French text of Loi organique n° 2004-63
hosted by the Agence Tunisienne de Certification Électronique (ATCT), a Tunisian public establishment the reproduced text carries the branding of the legislation-securite.tn consolidated-law database it was drawn from

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example  ·  Lint your app