AlgeriaPresidential Decree 20-05, National Information Systems Security System: Duty to Designate a Security Officer
In force.
A security baseline statutes rule binding public and private bodies.
- Instrument type
- a regulation made under an act
- Obligation class
- Security, Governance
As of .
What it requires
- This binds institutions, administrations, public bodies and private operators, other than for national defence information systems, which the decree excludes (articles 40 and 41).
- Designate the person in charge of the security of your information systems within one year of the decree's publication in the Journal officiel (article 41).
- When the information systems security agency asks for them, give it any document or information useful to its missions (article 19).
These lines are LexLint's reading of the law's text, as of .
Who enforces it
Settledness
- As of
- Open questions
- What sanction attaches to a failure to designate the person in charge of information systems security, given that the decree states none?
What this law does
Article 41 of Décret présidentiel n° 20-05 requires institutions, administrations, public bodies and private operators to designate the person in charge of the security of their information systems within one year of the decree's publication in the Journal officiel. Article 19 empowers the information systems security agency to require from bodies, institutions and operators that hold an information system any document or information useful to its missions.
Article 40 excludes the national defence information systems from the scope of the decree. Article 3 places under the Ministry of National Defence a national council for information systems security and an information systems security agency. The Journal officiel of published Décret présidentiel n° 20-05 of on the establishment of a national information systems security system.
When LexLint raises it
When your app profile says your app crawls the web, trains models, deploys a chatbot, sends automated outreach, makes high-risk automated decisions, processes voice recordings, processes biometric data, serves under-18s, operates a social platform, ships a mobile app, distributes a software product, generates content with AI, publishes adult content, operates an app store, reuses other publishers' content, records calls, records text chat or tracks devices.