Décret n° 2007-3004 du 27 novembre 2007 (conditions and procedures for declaration and authorisation) (Tunisia)
tn-decret-2007-3004 · Regulation
Décret n° 2007-3004 du 27 novembre 2007 is a principal implementing decree under Tunisia's Organic Law No. 2004-63 of 27 July 2004 on the protection of personal data. It fixes the conditions and procedures for the prior declaration of, and authorisation requests for, personal data processing, as well as the procedures for the withdrawal of authorisations and the prohibition of processing. It is administered by the Instance Nationale de Protection des Données Personnelles (INPDP). Under the decree, any personal data processing operation is subject to a prior declaration or authorisation as provided by the Organic Law. Declarations and authorisation requests are presented through prescribed forms, available in paper or electronic format. The INPDP examines a declaration within a period not exceeding one month from submission, and failure to object within that period constitutes acceptance. The decree also requires prior authorisation before the use of surveillance means. It is complemented by Décret n° 2007-3003 of the same date, which governs the organisation and operating procedures of the INPDP. This entry was created during a June 2026 documentation pass and is AI-drafted; the primary text is available via Tunisian legal databases (jurisitetunisie.com, legislation-securite.tn) and the INPDP website. Reviewer should confirm whether the companion Décret n° 2007-3003 warrants a separate record and capture any amendments. Source language: French/Arabic.
- Principal implementing decree under Organic Law No. 2004-63 (2004); dated 27 November 2007.
- Fixes the conditions and procedures for prior declaration of, and authorisation requests for, personal data processing, and for withdrawal of authorisations and prohibition of processing.
- All processing is subject to prior declaration or authorisation; forms are available in paper or electronic format.
- The INPDP examines a declaration within one month; failure to object within the period constitutes acceptance.
- Requires prior authorisation before the use of surveillance means.
- Complemented by Décret n° 2007-3003 (same date) on the INPDP's organisation and operating procedures.
- Reviewer action: consider a separate record for Décret 2007-3003; capture any amendments.