Tunisia is poised to significantly tighten its data protection regulations under a sweeping new bill unveiled in parliament on Tuesday, August 5, 2025.
The proposed legislation, introduced by 17 members of parliament, seeks to overhaul the country’s outdated data privacy laws with a modernized framework aligned with global standards.
MP Saber Mosmoudi, head of the “Libres” parliamentary bloc, confirmed that the draft law comprises 132 articles and is designed to fully replace existing legislation, which has struggled to keep pace with rapid technological developments.
At the heart of the proposed reform is the introduction of stringent penalties for violations. Companies and institutions found guilty of serious breaches could face financial sanctions of up to 200,000 Tunisian dinars—approximately €60,000. In some cases, these fines could be accompanied by prison sentences to enhance the law’s deterrent effect.
The bill also calls for the creation of an independent authority charged with monitoring and enforcing data protection rules. Additionally, all public sector institutions would be required to appoint a data protection officer to ensure compliance.
Among the bill’s key provisions is a revision of surveillance protocols. It proposes the removal of the requirement for prior authorisation to install surveillance cameras, except in sensitive locations. The regulation of cross-border data transfers would also be streamlined under the new law.
Emerging technologies such as artificial intelligence are addressed in a dedicated section of the bill. Four articles specifically target AI, focusing on transparency, purpose limitation, and proportionality in its use by both public and private entities. A separate organic law on AI is expected to follow in due course.
In recognition of the importance of press freedom, Article 80 introduces exemptions for data processing carried out for journalistic purposes—so long as such exemptions are necessary to protect freedom of expression and information.
This legislative initiative marks a significant step in Tunisia’s efforts to modernise its legal framework and better protect personal data in an increasingly digital society.
About The Author
