Duty LXD-1312
Processes biometric data, in Algeria
Loi n° 18-07 relative à la protection des personnes physiques, catégories de données sensibles et biométriquessince 3 lines
Loi n° 18-07 du 10 juin 2018, art. 18, telle que modifiée et complétée par la loi n° 25-11 du 24 juillet 2025, arts. 3 et 45 bis 7 · Read the law's page
- Do not process data revealing racial or ethnic origin, political opinions, religious or philosophical convictions or trade-union membership, nor health data including genetic data, unless the data subject gave express consent, a public interest or legal provision authorises it, or the ANPDP authorised it.
- Where you process genetic data as a doctor or biologist for preventive medicine, diagnosis or care, or process data a person has manifestly made public, or process sensitive data to establish or defend a legal claim, rely on the specific article 18 ground rather than express consent.
- If you are the judicial authority, a body legally empowered to investigate offences, a judicial auxiliary or the prison administration processing personal data under Title V bis for the prevention or detection of offences, investigations, inquiries, criminal prosecutions or the execution of sentences, put in place technical and organisational measures giving an appropriate level of protection for sensitive and biometric data.
Presidential Decree 20-05, National Information Systems Security System: Duty to Designate a Security Officerin force2 lines
Décret présidentiel n° 20-05 du 20 janvier 2020 portant mise en place d’un dispositif national de la sécurité des systèmes d’information, art. 41 · Read the law's page
- Designate the person in charge of the security of your information systems within one year of the decree's publication in the Journal officiel (article 41).
- When the information systems security agency asks for them, give it any document or information useful to its missions (article 19).
- This binds institutions, administrations, public bodies and private operators, other than for national defence information systems, which the decree excludes (articles 40 and 41).