Bring your processing activities into compliance with Law 18-07 on the protection of individuals in the processing of personal data. Applies to any data controller subject to this law.
Law 18-07 governs the protection of individuals in the processing of personal data in Algeria. It applies to any data controller — public or private — that collects, uses, stores or transfers personal data, and requires in particular the maintenance of a record of processing activities, the completion of a data protection impact assessment (DPIA) and the collection of explicit consent from data subjects.
Processing activities are supervised by the National Authority for the Protection of Personal Data (ANPDP). Intervalle supports you from the gap audit to lasting compliance, backed by our ISO 27001, PCI DSS and SWIFT certifications.
We address every obligation under the law, from declaration to full compliance.
Formalities to complete with the authority before processing begins.
Ground each processing activity on a legal basis and a defined purpose.
Information, access, rectification, objection and erasure of data.
Technical and organisational measures to protect personal data.
Conditions and safeguards applicable to transfers of data to third parties.
Prevent breaches and secure lasting compliance with the law.
The law grants data subjects several rights that the data controller must respect and facilitate.
Know which personal data is collected and how it is used.
Correct inaccurate or incomplete data.
Request deletion of data no longer needed for its purpose.
Restrict the processing of your data in certain situations.
Retrieve your data in a structured format and transfer it.
Object to processing or withdraw your consent at any time.
A complete approach, from audit to maintaining compliance.
Gap analysis against the requirements of Law 18-07.
Prioritised remediation plan and hands-on operational support.
Bring your processing activities into compliance with the whole law.
Regular reviews, monitoring and maintaining compliance over time.
Data protection, security and the national baseline — we cover them all.
Law 18-07 governs the protection of personal data in Algeria. It applies to any data controller, public or private, that collects, uses or stores personal data.
Maintain a record of processing activities, appoint a data protection officer, carry out a data protection impact assessment (DPIA), obtain the explicit consent of data subjects and notify breaches. Sanctions may be issued by the National Authority for the Protection of Personal Data (ANPDP).
Through a compliance audit (gap analysis) followed by a remediation plan, the implementation of a privacy policy and a cookie management notice, and training your teams in best practices.
Access, rectification, erasure, restriction of processing, portability, objection and withdrawal of consent at any time. The data controller must inform data subjects and handle their requests within a reasonable timeframe.
A gap analysis and a roadmap to Law 18-07 compliance, then ongoing follow-up. Leave us your details and an expert will get back to you.