National Authority Adopts Strict CV Data Protection Rules

Algeria's National Authority for Personal Data Protection (ANPDP) officially adopted deliberation n° 05 on November 11, 2026, establishing a strict framework for managing personal data contained within curriculum vitae. This new regulation applies to both paper and digital CVs, whether submitted directly to employers or through specialized recruitment platforms, and extends its scope to all public and private organizations. The measure is consistent with law n° 18-07 of June 10, 2018, which pertains to the protection of individuals concerning the processing of personal data.

Under the new framework, the processing of sensitive data is generally prohibited, as outlined in Article 18 of law n° 18-07, except in specifically authorized exceptional cases. This prohibition covers information related to racial or ethnic origin, political opinions, religious beliefs, trade union membership, and genetic data. Employers and recruiters are now explicitly forbidden from requiring the inclusion of such sensitive data without direct legal justification. Furthermore, the mere presence of these personal details in a CV does not constitute a sufficient legal basis for their collection or use. Organizations are also mandated to delete or mask any unnecessary information and to ensure optimal security and confidentiality for CVs throughout their retention period.

The ANPDP advises candidates to avoid including sensitive data in their CVs that is neither essential for demonstrating professional competencies nor legally required for the targeted position. A crucial aspect of this deliberation also addresses the duration for which application files can be stored. The Authority has set a maximum retention period of one year for CVs and their contained personal data, commencing from the date the recruitment process or professional selection concludes. Upon expiration of this period, these files must be destroyed or erased in accordance with current standards.