Skip to main content

    AI by country · North Africa

    AI in Tunisia: the rules, the readiness and where to start

    Last checked: 29 October 2026

    What should a company in Tunisia know before starting with AI?

    Tunisia has no AI law as of 29 October 2026. The rule that applies is Organic Law 2004-63 on personal data, overseen by the INPDP: processing needs a prior declaration, consent must be express and written, and every transfer abroad needs INPDP authorization. The government has called this law obsolete and announced a reform, and it presented the outline of a 2026 to 2030 AI strategy in August 2026.

    At a glance

    Tunisia at a glance

    Key facts about Tunisia
    Data protection lawOrganic Law 2004-63 of 27 July 2004, in force; reform announced
    RegulatorINPDP (Instance nationale de protection des données à caractère personnel)
    AI policyNo dedicated AI law as of 29 October 2026. Outline of a national AI strategy 2026 to 2030 presented on 15 August 2026
    Time zoneUTC+1 (India is 4.5 hours ahead)
    CurrencyTND (Tunisian dinar)
    Business languageArabic and French

    Why now

    Why Tunisia is worth watching

    Each point links to the document it comes from.

    • On 15 August 2026 the communication technologies minister presented the main lines of a national AI strategy for 2026 to 2030 at a ministerial council chaired by the Head of Government.[3]

    • At that council the minister said Tunisia ranks 29th worldwide for AI scientific publications.[3]

    • The same council reviewed 114 digital transformation projects in progress, including a national cybersecurity strategy and wider fibre-optic coverage.[3]

    • The minister has named digital health, agriculture, energy, transport and digital administration as priority sectors, and said legal frameworks for responsible AI are being drafted.[4]

    • In answers to Parliament published in late 2025, the Presidency of the Government called Law 2004-63 obsolete and announced a reform.[2]

    The rules

    The rules that matter for AI

    What each law or policy means when you build or buy an AI system.

    Organic Law 2004-63 of 27 July 2004 on the protection of personal data

    In force2004Every processing operation needs a prior declaration to the INPDP; no objection within one month counts as acceptance (article 7). Processing needs the person's express, written consent unless the law provides otherwise (article 27). Data on health, origin, religion or opinions is banned unless an exception applies, and most of it needs INPDP authorization (articles 14 and 15). Any transfer abroad needs INPDP authorization and a country with adequate protection (articles 51 and 52).[1]

    Organic Law 2004-63: penalties

    In force2004Penalties are criminal. Processing without the declaration or authorization, or sending data abroad without INPDP authorization, carries 1 year in prison and a fine of 5,000 dinars (article 90). Processing without the required consent carries 2 years and 10,000 dinars (article 87). A transfer that harms public security or Tunisia's vital interests carries 2 to 5 years (article 86).[1]

    Reform of the personal data law

    Draft2025The government announced a reform in late 2025 but we found no published bill. The same answers say the INPDP council's mandate expired on 16 April 2024. Status unclear as of 29 October 2026, so keep following Law 2004-63.[2]

    Where AI fits first

    Where AI fits first

    Health care

    Diagnostic support, epidemic monitoring and telemedicine tools, with doctors making decisions.

    The minister cites a digital hospital project. Health data has its own chapter in Law 2004-63 and can be processed in listed cases, such as with the person's consent (article 62).[4]

    Agriculture and water

    Forecasting models for water and food security from field and weather data.

    The ministry is building a new version of the National Water Observatory with the Ministry of Agriculture. Data that does not identify people falls outside Law 2004-63.[4]

    Outsourcing and IT services for foreign clients

    Code review, document processing and multilingual customer support for clients abroad.

    Sending personal data collected in Tunisia to a foreign AI service is a transfer that always needs INPDP authorization (article 52).[1]

    Public administration

    Arabic and French assistants for administrative services.

    The government lists a Khadamet mobile app with over 40 administrative services among coming projects.[3]

    Your first steps

    Your first steps

    1. File a prior declaration with the INPDP for each AI use that processes personal data, and wait for the one-month period to pass (article 7).
    2. Collect express, written consent where the law requires it, and keep a record you can show.
    3. Ask for INPDP authorization before sending any personal data to an AI service hosted abroad (article 52).
    4. Keep health, origin, religion and opinion data out of AI projects unless you have an exception and, where needed, authorization.
    5. Keep a person in charge of decisions about customers or staff, and be ready to explain them.
    6. Test models in Arabic and French on your own documents before using them with customers.
    7. Follow the planned reform of Law 2004-63 and the AI strategy, as rules may change.

    AI services for Tunisia

    AI consulting and development for teams in Tunisia

    We work remotely with companies in Tunisia, in your time zone, and keep your data under the rules described above.

    AI agents and automation

    Agents that finish multi-step work across your tools, with people approving what matters.
    Learn more

    Document Q&A (RAG)

    Answers from your own documents, with the source shown for every answer.
    Learn more

    AI governance and data protection

    Policies, review steps and audit trails that fit your local data law.
    Learn more

    Software and cloud engineering

    Web apps, integrations and cloud platforms built around your AI use case.
    Learn more

    How we work with you

    How we work with you

    We work remotely with clients worldwide, in the client's time zone. Tunisia is on UTC+1 and India on UTC+5:30, a 4.5 hour gap. Taking a 09:00 to 17:00 day in Tunis and 09:30 to 18:30 in India, the overlap is 5 hours, from 09:00 to 14:00 Tunis time.

    Questions

    Common questions about AI in Tunisia

    Does Tunisia have an AI law?

    No, not as of 29 October 2026. The government presented the outline of a 2026 to 2030 AI strategy in August 2026, and a press analysis notes that no budget, timeline or indicators have been made public. Law 2004-63 on personal data is the main rule for AI today.

    Do I need INPDP approval to use AI on customer data?

    You need to file a prior declaration for any processing of personal data. Sensitive data generally needs an authorization. Using a foreign AI service with personal data needs an authorization for the transfer.

    What are the penalties?

    They are criminal. Processing without a declaration, or transferring data abroad without authorization, can mean 1 year in prison and a 5,000 dinar fine. Processing without consent can mean 2 years and 10,000 dinars.

    Is Tunisia part of international data protection agreements?

    Yes. Organic Law 2017-42 of 30 May 2017 approved Tunisia's accession to Council of Europe Convention 108 on personal data.

    Complimentary tools

    Try these first

    Three complimentary tools from our AI Toolkit that suit a team starting out.

    AI readiness score

    Answer a few questions and see where your team stands, in about five minutes.
    Open the tool

    AI use case triage

    Test an idea against data, risk and effort before you spend on it.
    Open the tool

    AI project cost estimator

    Get a rough build and run cost range for a first AI project.
    Open the tool

    Read next

    Sources

    Sources

    Facts checked on 29 October 2026. Numbers in square brackets above match this list.
    1. [1] Republic of Tunisia (text hosted by the Institut National de la Statistique), 2004-07-27. Loi organique n° 2004-63 du 27 juillet 2004, portant sur la protection…(ins.tn)
      Full title and what we used it for

      Loi organique n° 2004-63 du 27 juillet 2004, portant sur la protection des données à caractère personnel. Law text in French, read in full. Used for articles 7, 14, 15, 27, 50 to 52, 62, 86, 87 and 90. The reading is ours. The INPDP website did not resolve when we checked.

    2. [2] La Presse de Tunisie, 2025-12-01. Données personnelles et accès à l'information : l'exécutif engage une m…(lapresse.tn)
      Full title and what we used it for

      Données personnelles et accès à l'information : l'exécutif engage une mise à jour urgente du cadre juridique. Press report of the Presidency of the Government's answers to written questions, published on the Parliament (ARP) website. Used for the 'obsolete' assessment, the announced reform and the INPDP council mandate expiring on 16 April 2024. We did not read the ARP page itself.

    3. [3] Tunisie Numérique, 2026-08-15. Conseil ministériel restreint consacré au suivi de l'avancement des pro…(tunisienumerique.com)
      Full title and what we used it for

      Conseil ministériel restreint consacré au suivi de l'avancement des projets de transformation numérique. Press report of a government ministerial council. Used for the AI strategy 2026 to 2030 presentation, the 29th place for AI publications (as stated by the minister), the 114 projects and the Khadamet app.

    4. [4] WebManagerCenter (with TAP), 2026-05-25. Tunisie : la stratégie nationale de l'IA mise sur la santé, l'agricultu…(webmanagercenter.com)
      Full title and what we used it for

      Tunisie : la stratégie nationale de l'IA mise sur la santé, l'agriculture et la souveraineté numérique. Press report of a speech by the communication technologies minister. Used for the priority sectors, the digital hospital, the water observatory and the responsible AI legal frameworks being drafted.

    5. [5] L'Economiste Maghrébin, 2026-08-17. Souveraineté numérique : le flou de la stratégie IA tunisienne(leconomistemaghrebin.com)
      Full title and what we used it for

      Souveraineté numérique : le flou de la stratégie IA tunisienne. Press analysis. Used for the point that no budget, detailed timeline or indicators for the strategy had been made public. We found no full official strategy text.

    6. [6] INPDP (hosted on mjs.tn), 2019-08-01. Recueil de la protection des données personnelles(mjs.tn)
      Full title and what we used it for

      Recueil de la protection des données personnelles. INPDP compilation of texts, dated August 2019 (day not stated). Used for Decree 2007-3004 on declaration and authorization procedures and Organic Law 2017-42 approving accession to Convention 108.

    This is general information, not legal advice. Tunisia's data protection law is due for reform and its AI strategy has not been published in full. Check your plans with a qualified Tunisian lawyer. Facts were checked on 29 October 2026.

    Other country guides

    Starting with AI in Tunisia?

    Talk to an engineer. The first call is free, and we start with a readiness assessment before any budget is committed.

    Talk to our team Get your AI score