Algeria Law No. 18-07 on Protection of Personal Data
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
| Short name | DZ 18-07 |
| Region | Middle East & Africa |
| Country or scope | Algeria |
| Sector | Privacy |
| In your workspace | Off until you switch it on in Compliance › Manage. |
How Safeguard covers DZ 18-07
- Scan requirements: 5, all decided by a scan.
- Controls: the scan requirements below.
- Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
- Policy templates: 22 from the standard set.
How each kind of coverage works, and what the readiness score counts: Compliance frameworks.
What a scan checks
Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).
| Requirement | What Safeguard checks | Decided by |
|---|---|---|
DZ-1807-38 Technical and Organizational Security Measures | The controller must implement technical and organizational measures commensurate with the risks and data sensitivity to protect personal data against unauthorized access, loss, destruction, alteration or illicit processing, presuming integrity verification of processing software (Law No. 18-07, Art. 38) | Scan |
DZ-1807-PROC Processor Security Guarantees | When processing is outsourced, the controller must select a processor offering sufficient technical and organizational security guarantees, formalized in a written contract, which requires third-party software suppliers to be identified (Law No. 18-07, processor-guarantee obligation) | Scan |
DZ-1807-DECL Prior Declaration to the ANPDP | Processing operations are subject to prior declaration to (or authorization by) the ANPDP, which presupposes an accurate inventory of the software systems and components performing the processing (Law No. 18-07, declaration/authorization regime) | Scan |
DZ-1807-QUAL Accuracy and Currency of Processing Systems | Data must be accurate and kept up to date; for the systems that process it, this requires knowing component versions so outdated or unmaintained software can be detected and corrected (Law No. 18-07, data-quality principle) | Scan |
DZ-1807-DOC Auditable Processing Documentation | Accountability to the ANPDP, reinforced by the logging and impact-assessment duties added by Law No. 25-11, requires dated and identifiable documentation of processing systems such as an SBOM with document ID and timestamp (Law No. 18-07 as amended by Law No. 25-11) | Scan |
Policy templates
All 22 from the standard set, adapted to DZ 18-07.
Middle East & Africa
The 76 frameworks for Middle East & Africa in Safeguard's library, and how Safeguard covers each.
Angola Law No. 22/11 on Protection of Personal Data
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.