Suspect a breach? Report it immediately — response within 1 hour.Report an incident
EBH Security
Contact us

Cybersecurity and Compliance in Algeria

Security audits, penetration testing, and compliance support for organizations operating in Algeria, aligned with the country's data protection and cybercrime framework.

Last updated — August 22, 2026

The local regulatory framework

Personal data protection in Algeria is governed by Law No. 18-07 on the protection of individuals in the processing of personal data, overseen by the National Authority for the Protection of Personal Data (ANPDP). Cybercrime is addressed under Law No. 09-04, which sets out specific rules on the prevention of and fight against offenses related to information and communication technologies. The National Agency for Information Systems Security (ANSSI-DZ) further coordinates national guidance on information systems security.

Concrete obligations

Compliance with Law No. 18-07 on the protection of individuals in the processing of personal data

Prior declaration or authorization of personal data processing with ANPDP depending on the nature of the processing

Compliance with Law No. 09-04 on the prevention of and fight against offenses related to information and communication technologies

Implementation of technical and organizational security measures proportionate to identified risks

Cooperation with the competent authorities, including ANSSI-DZ, on information systems security matters

Adapted services

Security Audit

Penetration Testing

Governance, Risk & Compliance (GRC)

Infrastructure Security

Priority sectors

Banking and financial servicesPublic sectorIndustry and energy

Delivery modalities

Engagement mode

On-site missions in Algiers and remote delivery for the rest of the territory

Working language

French and Arabic

Regulatory coordination

Support with declaration procedures before ANPDP

Local FAQ

Which authority oversees personal data protection in Algeria?

The National Authority for the Protection of Personal Data (ANPDP), which enforces Law No. 18-07.

Do all companies need to declare their data processing?

Declaration requirements vary depending on the nature and sensitivity of the processing; we assess this on a case-by-case basis for your activity.

What does Law No. 09-04 on cybercrime cover?

It establishes specific rules for preventing and combating offenses related to information and communication technologies, with cooperation obligations for the parties concerned.

What role does ANSSI-DZ play?

The National Agency for Information Systems Security coordinates national guidance on information systems security and serves as a key point of reference for organizations.

Do you work remotely or only on site?

Both. Technical audits and penetration tests can be delivered remotely, with on-site missions for phases requiring physical access.

Do you support declaration procedures with ANPDP?

Yes, we help organizations structure their data processing activities and prepare the required declaration procedures.

Which sectors are priorities for cybersecurity in Algeria?

Banking and financial services, the public sector, and industry and energy are among the sectors most exposed to cyber risk.

Get in touch