{
 "jurisdiction_id": "DZ",
 "jurisdiction": "Algeria",
 "url": "https://dataprotection.gi/jurisdictions/algeria/",
 "generator": "render_jid v13-gdpri-1.0.0",
 "date_modified": "2026-08-05",
 "schema_version": "gdpri-v2",
 "counts": {
  "categories": 10,
  "claims": 16,
  "sub_modules": 57,
  "source_register": 9
 },
 "categories": [
  {
   "code": "regulator_and_framework",
   "name": "Regulator & Framework",
   "traffic_light": "amber",
   "sub_modules": [
    "act_and_instruments",
    "material_scope",
    "regulator_and_authority",
    "regulator_registration_and_filing",
    "territorial_scope"
   ],
   "url": "https://dataprotection.gi/jurisdictions/algeria/#regulator-and-framework-regulator-framework",
   "traffic_light_rationale": "Comprehensive omnibus statute exists and regulator is nominally operational, but recency/detail of implementing texts (2025 amendment) and ANPDP's practical enforcement posture could not be fully corroborated from primary sources in this run.",
   "claims": [
    {
     "statement": "ANPDP (Autorité Nationale de Protection des Données à Caractère Personnel) is the designated national data-protection supervisory authority for Algeria and has issued compliance reminders and recommendations to controllers.",
     "regulatory_stage": null,
     "is_binding": false,
     "confidence": "Probable",
     "source_publisher": "DataGuidance (OneTrust)",
     "source_url": "https://www.dataguidance.com/news/algeria-anpdp-reminds-companies-obligations-under-law",
     "source_tier": null,
     "observed_at": null
    },
    {
     "statement": "Law No. 18-07 of 10 June 2018 on the Protection of Individuals in the Processing of Personal Data was published in Algeria's Official Gazette and constitutes the founding comprehensive data-protection statute.",
     "regulatory_stage": "in_force",
     "is_binding": true,
     "confidence": "Probable",
     "source_publisher": "DataGuidance (OneTrust)",
     "source_url": "https://www.dataguidance.com/news/algeria-data-protection-law-published-official-gazette",
     "source_tier": null,
     "observed_at": null
    },
    {
     "statement": "A law modifying the 2018 Data Protection Law was published in Algeria's Official Gazette in 2025, indicating an active legislative refinement of the regime.",
     "regulatory_stage": "in_force",
     "is_binding": true,
     "confidence": "Uncertain",
     "source_publisher": "DataGuidance (OneTrust)",
     "source_url": "https://www.dataguidance.com/news/algeria-law-modifying-data-protection-law-published",
     "source_tier": null,
     "observed_at": null
    },
    {
     "statement": "Law 18-07 is understood to apply to automated and organised manual processing of personal data carried out by public and private-sector controllers within Algeria, consistent with the general Francophone civil-law data-protection model.",
     "regulatory_stage": null,
     "is_binding": false,
     "confidence": "Speculative",
     "source_publisher": "Internal (no external corroboration retrieved for this specific claim)",
     "source_url": null,
     "source_tier": null,
     "observed_at": null
    },
    {
     "statement": "Algeria's regime is understood to require prior declaration or authorisation from ANPDP for certain categories of processing, following the regional CNIL-style prior-formality model, though the precise thresholds under 18-07 were not independently confirmed in this run.",
     "regulatory_stage": null,
     "is_binding": false,
     "confidence": "Speculative",
     "source_publisher": "Internal (no external corroboration retrieved for this specific claim)",
     "source_url": null,
     "source_tier": null,
     "observed_at": null
    }
   ]
  },
  {
   "code": "lawful_processing_and_special_data",
   "name": "Lawful Processing & Special Data",
   "traffic_light": "red",
   "sub_modules": [
    "consent_thresholds",
    "lawful_bases",
    "pseudonymisation_and_anonymisation",
    "special_categories"
   ],
   "url": "https://dataprotection.gi/jurisdictions/algeria/#lawful-processing-and-special-data-lawful-processing-special-data",
   "traffic_light_rationale": "No sentence-level primary or secondary source content was retrieved describing the specific lawful-basis enumeration, consent threshold, or special-category list; findings rely on regional-pattern inference only.",
   "claims": [
    {
     "statement": "Law 18-07 is understood to permit personal-data processing on grounds including data-subject consent and other statutory bases (e.g., legal obligation, public-interest task), following the regional Francophone data-protection model, though the exact enumerated list was not independently verified from primary text in this run.",
     "regulatory_stage": null,
     "is_binding": false,
     "confidence": "Speculative",
     "source_publisher": "Internal (no external corroboration retrieved for this specific claim)",
     "source_url": null,
     "source_tier": null,
     "observed_at": null
    },
    {
     "statement": "Algeria's data-protection law is expected to designate categories such as health, genetic, biometric, religious/philosophical, political, and criminal-record data as sensitive, subject to heightened restrictions or authorisation requirements, consistent with comparable regional statutes; DZ-specific statutory wording was not independently confirmed in this run.",
     "regulatory_stage": null,
     "is_binding": false,
     "confidence": "Speculative",
     "source_publisher": "Internal (no external corroboration retrieved for this specific claim)",
     "source_url": null,
     "source_tier": null,
     "observed_at": null
    }
   ]
  },
  {
   "code": "data_subject_rights",
   "name": "Data Subject Rights",
   "traffic_light": "red",
   "sub_modules": [
    "access_right",
    "data_portability",
    "deadlines_and_response_windows",
    "rectification_and_erasure",
    "restriction_and_objection"
   ],
   "url": "https://dataprotection.gi/jurisdictions/algeria/#data-subject-rights-data-subject-rights",
   "traffic_light_rationale": "No sentence-level source content was retrieved on DZ's specific subject-rights catalogue, deadlines, or portability provision; module populated with inference-based, low-confidence claims and explicit gaps only.",
   "claims": [
    {
     "statement": "Individuals are expected to hold a right of access to personal data held about them under Law 18-07, consistent with the regional Francophone data-protection model, though the specific statutory mechanics were not independently verified in this run.",
     "regulatory_stage": null,
     "is_binding": false,
     "confidence": "Speculative",
     "source_publisher": "Internal (no external corroboration retrieved for this specific claim)",
     "source_url": null,
     "source_tier": null,
     "observed_at": null
    },
    {
     "statement": "A right to rectify inaccurate personal data is expected under Law 18-07 consistent with the regional statutory model; the presence and scope of an erasure/right-to-be-forgotten equivalent could not be independently confirmed in this run.",
     "regulatory_stage": null,
     "is_binding": false,
     "confidence": "Speculative",
     "source_publisher": "Internal (no external corroboration retrieved for this specific claim)",
     "source_url": null,
     "source_tier": null,
     "observed_at": null
    }
   ]
  },
  {
   "code": "controller_processor_duties",
   "name": "Controller/Processor Duties",
   "traffic_light": "amber",
   "sub_modules": [
    "accountability_and_dpia",
    "breach_notification",
    "dpo_requirements",
    "joint_controller_arrangements",
    "retention_and_disposal",
    "ropa_requirements",
    "security_measures"
   ],
   "url": "https://dataprotection.gi/jurisdictions/algeria/#controller-processor-duties-controller-processor-duties",
   "traffic_light_rationale": "Regulator activity (guidance-issuing) is corroborated; underlying granular statutory obligations (DPIA/DPO/ROPA/breach-notification specifics) are not verified.",
   "claims": [
    {
     "statement": "Controllers under Algeria's data-protection regime are expected to implement baseline technical and organisational security measures, consistent with ANPDP's active issuance of practical compliance recommendations to companies, although the precise statutory security standard was not independently verified in this run.",
     "regulatory_stage": null,
     "is_binding": false,
     "confidence": "Uncertain",
     "source_publisher": "DataGuidance (OneTrust)",
     "source_url": "https://www.dataguidance.com/news/algeria-anpdp-issues-recommendations-disclosing",
     "source_tier": null,
     "observed_at": null
    }
   ]
  },
  {
   "code": "cross_border_and_adequacy",
   "name": "Cross-Border & Adequacy",
   "traffic_light": "amber",
   "sub_modules": [
    "adequacy_granted",
    "adequacy_received",
    "data_localisation",
    "sccs_and_bcrs",
    "transfer_impact_assessment",
    "transfer_mechanisms"
   ],
   "url": "https://dataprotection.gi/jurisdictions/algeria/#cross-border-and-adequacy-cross-border-adequacy",
   "traffic_light_rationale": "Underlying transfer-mechanism statutory detail is unverified (red-level gap), but the AML high-risk designation is a corroborated, materially relevant cross-border data-flow risk factor (amber).",
   "claims": [
    {
     "statement": "Algeria's data-protection regime is expected to condition cross-border transfers of personal data on prior authorisation from ANPDP or an assessment of the destination country's level of protection, consistent with comparable regional Francophone statutes, though the precise statutory transfer-mechanism text for DZ was not independently verified in this run.",
     "regulatory_stage": null,
     "is_binding": false,
     "confidence": "Speculative",
     "source_publisher": "Internal (no external corroboration retrieved for this specific claim)",
     "source_url": null,
     "source_tier": null,
     "observed_at": null
    },
    {
     "statement": "Algeria was added to the EU's Delegated Regulation list of high-risk third countries for AML/CFT purposes in 2024-2025, reflecting heightened scrutiny of Algeria's data-sharing and financial-crime compliance frameworks relevant to cross-border data flows involving Algerian entities.",
     "regulatory_stage": "in_force",
     "is_binding": true,
     "confidence": "Confirmed",
     "source_publisher": "Official Journal of the European Union",
     "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32025R1184",
     "source_tier": null,
     "observed_at": null
    }
   ]
  },
  {
   "code": "sectoral_watch",
   "name": "Sectoral Watch",
   "traffic_light": "amber",
   "sub_modules": [
    "credit_and_scoring",
    "education",
    "employment_data",
    "financial_sector_overlay",
    "health_sector_overlay",
    "insurance",
    "telecoms_and_eprivacy"
   ],
   "url": "https://dataprotection.gi/jurisdictions/algeria/#sectoral-watch-sectoral-watch",
   "traffic_light_rationale": "Financial-sector overlay is materially corroborated (AML high-risk designation); other sectoral sub-modules are unverified gaps.",
   "claims": [
    {
     "statement": "The European Commission concluded that Algeria has not yet fully addressed the concerns that led to its addition to the FATF's list of Jurisdictions under Increased Monitoring, and Algeria should therefore be considered a high-risk third country under EU AML/CFT rules.",
     "regulatory_stage": "in_force",
     "is_binding": true,
     "confidence": "Confirmed",
     "source_publisher": "Official Journal of the European Union",
     "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32025R1184",
     "source_tier": null,
     "observed_at": null
    }
   ]
  },
  {
   "code": "adtech_and_commercial_privacy",
   "name": "AdTech & Commercial Privacy",
   "traffic_light": "red",
   "sub_modules": [
    "clean_rooms_and_dcr",
    "cookies_and_trackers",
    "cross_context_advertising",
    "dark_patterns",
    "direct_marketing",
    "opt_out_signals"
   ],
   "url": "https://dataprotection.gi/jurisdictions/algeria/#adtech-and-commercial-privacy-adtech-commercial-privacy",
   "traffic_light_rationale": "No sourced content located for any adtech/commercial-privacy sub-module specific to Algeria.",
   "claims": []
  },
  {
   "code": "algorithmic_biometric_and_surveillance_governance",
   "name": "Algorithmic, Biometric & Surveillance Governance",
   "traffic_light": "red",
   "sub_modules": [
    "ai_risk_assessments",
    "automated_decision_making_transparency",
    "biometric_regime",
    "genetic_data",
    "profiling_restrictions",
    "state_surveillance_carveouts"
   ],
   "url": "https://dataprotection.gi/jurisdictions/algeria/#algorithmic-biometric-and-surveillance-governance-algorithmic-biometric-surveill",
   "traffic_light_rationale": "No sourced content located for algorithmic/biometric/surveillance-governance sub-modules specific to Algeria.",
   "claims": []
  },
  {
   "code": "children_and_vulnerable_groups",
   "name": "Children & Vulnerable Groups",
   "traffic_light": "red",
   "sub_modules": [
    "age_verification",
    "dependent_adults",
    "education_settings",
    "minor_profiling_bans",
    "parental_consent"
   ],
   "url": "https://dataprotection.gi/jurisdictions/algeria/#children-and-vulnerable-groups-children-vulnerable-groups",
   "traffic_light_rationale": "No sourced content located for any children/vulnerable-groups sub-module specific to Algeria.",
   "claims": []
  },
  {
   "code": "enforcement_and_redress",
   "name": "Enforcement & Redress",
   "traffic_light": "amber",
   "sub_modules": [
    "collective_redress_and_class_actions",
    "enforcement_activity_index",
    "private_right_of_action",
    "recent_developments_180d",
    "regulator_funding_and_capacity",
    "regulator_powers_and_penalties"
   ],
   "url": "https://dataprotection.gi/jurisdictions/algeria/#enforcement-and-redress-enforcement-redress",
   "traffic_light_rationale": "Regulator operational activity is corroborated (amber); granular penalty/funding/redress-mechanism details remain unverified (would otherwise be red).",
   "claims": [
    {
     "statement": "ANPDP publicly reminded companies of their obligations under Law No. 18-07, indicating active regulator engagement with controller compliance.",
     "regulatory_stage": null,
     "is_binding": false,
     "confidence": "Probable",
     "source_publisher": "DataGuidance (OneTrust)",
     "source_url": "https://www.dataguidance.com/news/algeria-anpdp-reminds-companies-obligations-under-law",
     "source_tier": null,
     "observed_at": null
    },
    {
     "statement": "ANPDP issued recommendations concerning the disclosure of personal data, evidencing ongoing regulatory guidance activity beyond a purely dormant statutory framework.",
     "regulatory_stage": null,
     "is_binding": false,
     "confidence": "Probable",
     "source_publisher": "DataGuidance (OneTrust)",
     "source_url": "https://www.dataguidance.com/news/algeria-anpdp-issues-recommendations-disclosing",
     "source_tier": null,
     "observed_at": null
    },
    {
     "statement": "The European Commission's June 2025 Delegated Regulation confirmed Algeria's continued listing as a high-risk AML/CFT third country, a recent development materially relevant to Algeria's cross-border compliance and data-sharing risk profile.",
     "regulatory_stage": "in_force",
     "is_binding": true,
     "confidence": "Confirmed",
     "source_publisher": "Official Journal of the European Union",
     "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32025R1184",
     "source_tier": null,
     "observed_at": null
    }
   ]
  }
 ]
}