Where we work · Algeria
ISO and GRC certification consulting in Algeria
Achieve ISO and GRC certification in Algeria with Sterling: 8,100+ client engagements in 60+ countries, 20+ years.
- 21 standards, one team
- Accredited certification route
- Casablanca office team
- Effivity and Academy included
Sectors that ask for certification in Algeria
Clients include
ISO and GRC certification in Algeria at a glance
Algeria's rules shape which certificates matter. Personal data sits under Law No. 18-07 of 10 June 2018, amended by Law No. 25-11 of 24 July 2025, with the national personal data authority overseeing it. Presidential Decree No. 26-07 obliges public institutions, administrations and bodies to create a structure for information systems security and data protection. ALGERAC is the accreditation body, which Global ACI lists as a full member and signatory of its mutual recognition arrangement, and IANOR is the national standards body. ANPP registers pharmaceutical products and approves medical devices, Law No. 22-18 sets the investment framework with one-stop shops, and Law No. 23-12 bases public tender specifications on standards or performance. Demand comes from electricity, gas and renewable energy, pharmaceutical makers, food processors, public bodies, industrial investors and financial market participants. Certificates come from accredited certification bodies, never from Sterling. Sterling's Casablanca office serves clients in Algeria on-site where the work needs it and remotely otherwise, with 20+ years, 8,100+ client engagements in 60+ countries, and Effivity software and Sterling Academy training included with the engagement.
ISO and GRC standards Sterling delivers in Algeria
Each card opens Sterling's guide to the standard: what it requires, how certification or compliance works and what sets the time and cost.
Quality & operational excellence
Information security, cyber & cloud
Privacy & data protection
AI governance & digital trust
Environment, energy & climate
Health & safety
Governance, risk & resilience
Financial services, payments & AML
Food safety & agriculture
Healthcare, medical devices & life sciences
Laboratories, inspection & accreditation
Automotive, aerospace, rail & defence
Construction, energy, oil & gas
Regulators and laws that drive certification in Algeria (9)
| Law or regulator | What it asks for | Standards it cites |
|---|---|---|
| Law No. 18-07 on the protection of natural persons in the processing of personal data Autorité nationale de protection des données à caractère personnel, the independent administrative authority the law attaches to the President of the Republic, seated in Algiers and commonly shortened to ANPDP | Applies to automated and manual processing of personal data by public bodies and private persons whose controller is established in Algeria or uses means located there. Processing rests on the person's express consent unless the law lists an exception, children's data needs the consent of the legal representative, and data must be lawful, collected for set purposes, adequate, accurate and kept no longer than needed. The controller files a prior declaration with the authority and receives a receipt, and may start once it holds the receipt; the authority can place a processing under prior authorisation where it sees manifest dangers, and sensitive data is prohibited except in the cases the law lists or with the authority's authorisation. People must be informed and hold rights of access, rectification and objection, and direct marketing by automated call, fax or e-mail needs prior consent. The controller applies appropriate technical and organisational security measures and binds any processor by a contract acting only on instructions. Providers of public electronic communications services notify breaches to the authority. Transfers abroad need the authority's authorisation and a state ensuring a sufficient level of protection, with listed derogations. Penalties are set in the law and are not restated here. | |
| Law No. 25-11 amending and supplementing Law No. 18-07 The national authority named in Law No. 18-07 (ANPDP) | The amending law adds definitions (including biometric data, profiling, pseudonymisation and personal data breach), regional hubs of the authority for control and audit, a data protection delegate designated by the controller, a register of processing activities kept by the controller and the processor, and an automated log of processing operations. These records are made available to the authority on request. The amending law also repeals two articles of the 2018 law (Articles 10 and 11). | |
| Each institution's own security structure, created under Presidential Decree No. 26-07 Public institutions, administrations and public bodies | Presidential Decree No. 26-07 of 7 January 2026, published in Official Journal No. 4 of 18 January 2026, requires every public institution, administration and body to set up a structure responsible for information systems security and data protection, independent of its information systems unit and attached to its head. The structure writes the security policy, maps risks, runs audits and controls, watches for incidents, reports cyber incidents to the competent authorities and works with the national personal data authority. The decree cites Presidential Decree No. 20-05 of 20 January 2020 on the national information systems security framework. It names no ISO standard. | |
| National Agency for Pharmaceutical Products (ANPP) Pharmaceutical products and medical devices | ANPP's mission page states that it registers pharmaceutical products, approves medical devices, controls the quality of both, carries out audits and field inspections on good pharmaceutical practice and medical device standards, and helps set good practice rules for making, storing and distributing pharmaceutical products. Its mission page does not name ISO 13485. | |
| State consumer-protection services under Law No. 09-03 Food businesses and every operator that places food on the market | Law No. 09-03 of 25 February 2009 on consumer protection and the repression of fraud, published in Official Journal No. 15 of 8 March 2009, opens its consumer protection title with a duty of hygiene, cleanliness and safety for foodstuffs. Article 4 makes every actor in the chain that puts food on the market responsible for the safety of the food and for ensuring it does not harm consumers. The text does not name HACCP or ISO 22000. | |
| Ministry in charge of industry Product conformity, technical regulations and certification procedures | Executive Decree No. 17-62 of 7 February 2017 sets the conditions for applying conformity marking to technical regulations and the procedures for certification of conformity. It rests on Law No. 04-04 of 23 June 2004 on standardisation and on Executive Decree No. 05-466 of 6 December 2005, which created ALGERAC. It concerns products covered by technical regulations and does not make a management system certificate compulsory. | |
| Ministry of Energy and Renewable Energies Electricity, gas and renewable energy | The ministry's national energy policy page lists, among its objectives, promoting energy efficiency with the sectors concerned, raising the contribution of new and renewable energies to national production, and integrating digitalisation into the management processes of public entities. The page does not name ISO 50001. | |
| Algerian investment promotion agency and the one-stop shops under Law No. 22-18 Investors in industry and services | Law No. 22-18 of 24 July 2022 on investment, published in Official Journal No. 50 of 28 July 2022, lists the National Investment Council and the Algerian investment promotion agency among its bodies and provides a one-stop shop for large projects and foreign investment plus decentralised one-stop shops. It requires investors to respect the legislation and standards on environmental and public health protection, competition, labour and transparency of accounting and financial information. | |
| COSOB (Commission d'Organisation et de Surveillance des Opérations de Bourse) Financial market | COSOB's website presents it as the regulatory authority of the Algerian financial market and publishes regulations and decisions. |
Accreditation and recognition
- ALGERAC (Organisme Algérien d'Accréditation, the Algerian Accreditation Body): National accreditation body, created by Executive Decree No. 05-466 of 6 December 2005.
- IANOR (Institut Algérien de Normalisation): National standards body under the Ministry in charge of industry. IANOR describes its role as seeing that national standards are prepared and helping businesses obtain and apply standards. It is cited here for its standards role only.
Look for a certification body whose accreditation scope covers your standard and sector, from a national accreditation body recognised under the international arrangements of Global ACI (Global Accreditation Cooperation Incorporated, formerly the IAF MLA). Sterling does not certify.
Tenders and procurement
- Public procurement under Law No. 23-12 laying down the general rules on public contracts (Contracting services of the State, local authorities and public bodies, under Law No. 23-12 of 5 August 2023 (Official Journal No. 51 of 6 August 2023)): The law requires the contracting service to define its needs through detailed technical specifications based on standards, performance or functional requirements, not steered to a given product or supplier, and to state its award criteria and their weights in the tender documents. It encourages the participation of Algerian small and medium-sized enterprises and favours national integration. It sets no general ISO certificate requirement; any certificate sought sits in the individual tender document.
Sterling in Algeria
Sterling delivers in Algeria from its Casablanca office: one team from scoping to certificate, with Effivity ISO & GRC software and Sterling Academy access included. Sterling does not certify; certification decisions stay with independent bodies.
Questions Algeria clients ask
Is there a personal data protection law in Algeria, and who oversees it?
Yes. Law No. 18-07 of 10 June 2018 protects natural persons whose personal data is processed, and Law No. 25-11 of 24 July 2025 amended it. The national authority for personal data protection, an independent administrative authority attached to the President of the Republic and seated in Algiers, receives declarations, grants authorisations and monitors compliance. Confirm how it applies to your processing with the authority or your counsel.
Who accredits certification bodies in Algeria, and is it recognised abroad?
ALGERAC is the national accreditation body. Global ACI lists it as a full member and mutual recognition arrangement signatory, with management systems certification recognised for ISO 9001, ISO 14001, ISO 22000 and ISO 45001, and EA records it as an EA MLA signatory for certification of management systems. For other standards, ask the certification body for the scope on its accreditation certificate.
Do public bodies in Algeria have to organise information security?
Yes, by decree. Under Presidential Decree No. 26-07, each public institution, administration and body creates a dedicated unit for information systems security and data protection, kept apart from its IT department and answering to its head. The unit sets policy, maps risks, audits, tracks incidents and reports them. Suppliers should read the buyer's tender documents for the matching contract clauses.
Does Algerian public procurement require ISO certificates?
Not as a general rule. Law No. 23-12 asks contracting services to describe needs through technical specifications based on standards or performance, and to state award criteria in the tender documents. No blanket ISO certificate is required, but an individual tender can ask for one, so read each tender document and confirm with the contracting service.
Which Algerian agency regulates medicines and medical devices?
The National Agency for Pharmaceutical Products, ANPP. It registers pharmaceutical products, approves medical devices, controls their quality and carries out audits and field inspections on good practice. Its mission page does not name ISO 13485, so a device maker should ask the agency what evidence it expects with a dossier and treat a quality system certificate as supporting evidence.
Can audits in Algeria be done in English or French?
Often French, and sometimes English, though Arabic is the working language of many sites. The Official Journal carries a French translation of laws, and several Algerian bodies publish in French, Arabic and English. Settle with the certification body at application which language the audit, interpreter and controlled documents will use.
Start with a free discovery call
A Sterling consultant goes through your entities, your regulators and your target date with you. No proposal until the scope is agreed.
Sources
- Law No. 18-07 on the protection of natural persons in the processing of personal data — joradp.dz (accessed 18 Oct 2026)
- Law No. 25-11 amending and supplementing Law No. 18-07 — joradp.dz (accessed 18 Oct 2026)
- Presidential Decree No. 26-07 of 7 January 2026, published in Official Journal No. 4 of 18 January 2026, requires every public institution, administration and body to set up a structure responsible for information systems security and data protection, independent of its information systems unit and attached to its head. The structure writes the security policy, maps risks, runs audits and controls, watches for incidents, reports cyber incidents to the competent authorities and works with the national personal data authority. The decree cites Presidential Decree No. 20-05 of 20 January 2020 on the national information systems security framework. It names no ISO standard. — joradp.dz (accessed 18 Oct 2026)
- ANPP's mission page states that it registers pharmaceutical products, approves medical devices, controls the quality of both, carries out audits and field inspections on good pharmaceutical practice and medical device standards, and helps set good practice rules for making, storing and distributing pharmaceutical products. Its mission page does not name ISO 13485. — anpp.dz (accessed 18 Oct 2026)
- Law No. 09-03 of 25 February 2009 on consumer protection and the repression of fraud, published in Official Journal No. 15 of 8 March 2009, opens its consumer protection title with a duty of hygiene, cleanliness and safety for foodstuffs. Article 4 makes every actor in the chain that puts food on the market responsible for the safety of the food and for ensuring it does not harm consumers. The text does not name HACCP or ISO 22000. — joradp.dz (accessed 18 Oct 2026)
- Executive Decree No. 17-62 of 7 February 2017 sets the conditions for applying conformity marking to technical regulations and the procedures for certification of conformity. It rests on Law No. 04-04 of 23 June 2004 on standardisation and on Executive Decree No. 05-466 of 6 December 2005, which created ALGERAC. It concerns products covered by technical regulations and does not make a management system certificate compulsory. — ianor.dz (accessed 18 Oct 2026)
- The ministry's national energy policy page lists, among its objectives, promoting energy efficiency with the sectors concerned, raising the contribution of new and renewable energies to national production, and integrating digitalisation into the management processes of public entities. The page does not name ISO 50001. — energy.gov.dz (accessed 18 Oct 2026)
- Law No. 22-18 of 24 July 2022 on investment, published in Official Journal No. 50 of 28 July 2022, lists the National Investment Council and the Algerian investment promotion agency among its bodies and provides a one-stop shop for large projects and foreign investment plus decentralised one-stop shops. It requires investors to respect the legislation and standards on environmental and public health protection, competition, labour and transparency of accounting and financial information. — joradp.dz (accessed 18 Oct 2026)
- COSOB's website presents it as the regulatory authority of the Algerian financial market and publishes regulations and decisions. — cosob.dz (accessed 18 Oct 2026)
- ALGERAC (Organisme Algérien d'Accréditation, the Algerian Accreditation Body) — global-aci.org; european-accreditation.org; ianor.dz (accessed 18 Oct 2026)
- IANOR (Institut Algérien de Normalisation) — ianor.dz (accessed 18 Oct 2026)
- Public procurement under Law No. 23-12 laying down the general rules on public contracts — joradp.dz (accessed 18 Oct 2026)
Talk to a consultant
Plan your certification with the Casablanca team.
Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.
southafrica@sterling-grc.com+1 201 263 4443 (global headquarters) · the Casablanca office replies by e-mail within one working day
What would you like to achieve?
Choose a starting point. The enquiry form takes about a minute.
Book my free discovery callContinue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice