The framework
Algeria regulates personal data through Law No. 18-07 on Personal Data Protection, dating from 2018 and supervised by the ANPDP.
For advertisers the consent posture matters most, and Algeria sits in the opt-in bloc, where tracking and outreach need permission up front.
Key instruments
Law No. 18-07 on Personal Data Protection
Law 18-07 finally became operational when the ANPDP was installed in 2023, five years after adoption; registration and transfer-authorization duties now apply in earnest.
Marketing and advertising
Consent-first with authorization duties for sensitive data and transfers. Most channel decisions here follow from that consent rule.
Cross-border transfers
Most transfers abroad require authorization from the ANPDP. Foreign laws with extraterritorial reach, the GDPR above all, can still govern data about residents here whenever a controller abroad is involved.
Enforcement and penalties
Violations can bring fines and imprisonment. A ceiling means little until the authority uses it, so its docket is the better guide.