Compliance
The national AI strategy, translated for a small business
A strategy sets a direction; it imposes nothing on a business. Where it stands on 6 September 2026, what concerns you, and what already obliges you.
Since the spring of 2026 the national artificial intelligence strategy has returned to the press at every stage, and each article gives the impression that a deadline is approaching for businesses. None is.
A strategy is a document in which the state sets a direction for itself: it commits administrations, budgets and programmes. It creates no obligation for a private business, and what obliges you today comes from elsewhere — a 2018 law amended in 2025, unrelated to it.
This article says where the text stands on the day it is written, what it actually contains, through which channels it will reach you first, and what it will not settle. It rewrites no communiqué and reproduces no numeric target: the decision that concerns you is taken on what exists.
Where the text stands on 6 September 2026
Three dated facts, and they are enough to place the question. On 25 May 2026 a government meeting chaired by the Prime Minister examined the draft national artificial intelligence strategy, alongside the rollout of the national digital services portal.
That meeting’s communiqué states that the strategy will be broken down into operational action plans **after its adoption by the Council of Ministers**. That adoption is the missing step, and it is what triggers everything else.
On 5 August 2026 a first interministerial meeting devoted to the national strategic plan brought together representatives of the main ministries and institutions, under the Minister of Higher Education and Scientific Research. Coordination work has therefore begun.
Those three facts come from official communiqués relayed by the national press, and they agree across sources on what matters: the stage reached and the step missing. We date them rather than summarise them, because a state of progress quoted without a date becomes false without anybody noticing.
What does not exist on the day this is written: a text published in the official journal, an implementing decree, an obligation enforceable against a business. Check this section before relying on it — it is a state of affairs at a date, and the date is in the section heading for that reason.
A strategy is not a law
The confusion is common and it costs time. A law creates rights and obligations and applies to whoever it designates. A strategy describes what the state wants to achieve, with what means and in what order, and it applies first to the state.
Between the two sit the implementing texts: decrees, orders, tender specifications. That is where a strategy may become a constraint on you, and the gap between the announcement and that stage is rarely counted in weeks.
The Algerian corpus offers an immediate example: law 18-07 of 10 June 2018 on the protection of personal data, amended and completed by law 25-11 of 24 July 2025, exists and obliges you — and some of its implementing texts have still not been published. A legal obligation can therefore be in force and partly inapplicable; a strategy can be announced and oblige nobody.
There is an intermediate case worth knowing because it catches careful businesses: the tender specification. It is neither a law nor a strategy, it is a contractual document — it applies only to those who bid, it is not published in the official journal, and it can demand more than a regulation does. A requirement can therefore constrain you without being a legal obligation, and that is how public policy reaches suppliers in practice.
The reading rule is simple: ask which article of which published text imposes what on you. If nobody can answer, the announcement is an orientation, and an orientation is not planned against like a deadline.
The three levers, and which one touches you
The strategy examined in May rests on three levers presented as structural: data, digital infrastructure, and human skills. That is a public description and it is what is useful to retain.
The first lever may concern you soonest, and not in the way people imagine. A data policy is about public data, its opening and its circulation between administrations. What interests you in that is what becomes available, not what becomes required.
The second is an equipment lever — computing capacity, connectivity, hosting. It changes your purchasing options in the medium term and changes nothing about your week.
The strategy is also presented as articulated around six axes, concerned mainly with scientific research and with creating a favourable environment. That structural detail is more instructive than it looks: a strategy whose centre of gravity is research and the ecosystem acts on supply — laboratories, training, startups — and not on the demand of existing businesses.
The third, skills, produces the slowest and most durable effects, and it is also the only one a business can act on alone without waiting for anything. Section 8 says how.
The announced objectives are targets
Several figures circulate: a share of gross domestic product, a count of labelled companies, a market size at a given horizon. We do not reproduce them, and the reason is not caution.
An announced target is a goal the state sets itself. It is neither a measurement of what exists, nor an independent forecast, nor a commitment to you. Picked up in an article and read six months later, it becomes a figure somebody quotes as though it described the market.
That is exactly the defect this blog forbids itself elsewhere for prices and conversion rates, and there is no reason to permit it because the source is public. A public source makes a figure verifiable; it does not make it true of the market.
What you can do with those targets is limited and honest: they indicate the areas where public means are likely to go. That is information about the state’s attention, not about your revenue.
The first real channel: public procurement
If the strategy reaches you, it will be through there first. An administration that receives a budget and a programme buys services, and tender specifications start asking for things nobody asked for the year before.
What that produces concretely is a documentary requirement: where the data is hosted, who processes it, what guarantees exist, how reversibility works. A business that has answered those questions in writing for a long time is ready; the others discover the question inside a file with a closing date.
The processing register is the asset to have here, and it already is one for another reason. Filling it in on a real case takes a day and serves both directions — the existing legal obligation, and the document a public buyer will ask for.
What is worth knowing is that those questions arrive in a fixed order and that the first is always about location. Where the data is hosted decides whether the rest of the file is read, and it is the one answer that cannot be improvised in the week a tender closes — it depends on a contract signed months earlier.
It is the only point in this article where we advise anticipating. The rest cannot be planned for because it has no public calendar.
The second: support schemes
The second channel is that of labels, support programmes and funding. It already exists for the startup ecosystem, and a sectoral strategy generally widens its scope.
The useful thing to know is that these schemes work on files and on criteria, and that the criteria are written somewhere before they are known. A business following the relevant body rather than the press sees the calls go past; one following the press discovers them at the closing date.
There is a design trap worth flagging. Many schemes require a track record — accounts, a registration, sometimes a declared activity in a precise field — and those conditions are prepared months in advance or not at all.
We name no scheme here, because their conditions change from one round to the next and a list published in an article is wrong by its second year. Section 10 says where to look instead.
The third: skills, right away
The skills lever is the only one that waits for nothing. A small business wanting to be ready needs no text to train two people to read a dashboard, write a proper instruction and check an answer.
What is missing in the businesses we see is almost never a technical skill: it is somebody who knows how to describe a process. A system, whichever it is, cannot be installed on work nobody has written down, and that gap is closed with paper.
The second useful skill is reading a commercial proposal critically, and it is acquired by asking three questions: who starts it, who decides, and what the last decision taken without a human seeing it is.
There is a third skill, rarer and more useful still: knowing how to say no to a project. Somebody able to explain in a meeting why a given need does not justify a tool saves more each year than the other two earn, and that ability comes from the habit of counting before buying.
Neither of those depends on a public budget, a label or an adoption by the Council of Ministers. That is what makes them interesting while the rest waits.
What the strategy does not settle
Two concrete obstacles weigh on an Algerian business wanting to use these tools today, and neither is addressed by a research and infrastructure plan.
The first is paying a foreign supplier, which is a matter of exchange control and bank domiciliation, not of digital policy. It is a problem of payment means and tax qualification, and it is solved with a banker and an accountant.
The second is transferring data outside the territory, which is a matter of the personal data law. What you are entitled to send to a model hosted abroad is a question settled by a text in force, independently of any strategy.
A third point deserves adding because it surprises: the availability of a business payment method a foreign supplier will accept is not a digital-policy subject either. It is a banking question, settled institution by institution and file by file, with answers that differ from one branch to the next.
We are not saying the strategy ought to address them: they are not its instruments. We are saying that a business waiting for it to solve those two points will wait a long time, and that both have answers today.
Following the text without reading the press
Press monitoring is the worst way to know where a text stands: it reports stages of discussion in the vocabulary of completion, and it never reports the absence of news.
The only monitoring that says anything is official publication. A text exists when it is published; before that it is a draft, however many articles discuss it.
The cheapest practice is a quarterly twenty-minute appointment: check whether a text has been published, and if so, which and on what. Three times out of four the answer is no, and that answer is information — it tells you nothing has changed for you.
One clarification about the word “published” saves a disappointment. A published text carries a number, a date and a subject, and it can be cited. An announcement, a communiqué, a statement at a conference carry none of that and can be cited to nobody. When you check, the number is what you are looking for, and its absence is a complete answer.
That rhythm is the same as the review of an automation or a corpus, and it gains from being done on the same day. An hour a quarter covers all three.
The appointment has an owner, or it does not happen
A quarterly check with no name against it is an intention, and an intention does not survive a busy month. The person who holds it does not need to be a lawyer: they need the date in their calendar and one line to write.
That line has three elements: the date of the check, what was looked at, and the result — published or not published. Three words are enough for the third. It is a ten-line register after three years, and it answers instantly the question "since when have we known this?".
That detail is not administrative. On the day a text is published, the question that arises immediately is how long it has existed, because deadlines run from publication and not from your discovery. A business holding that line knows its margin; the others estimate it.
Our advice is to attach the appointment to something that already exists — the quarterly review of an automation, the close of an accounting quarter — rather than creating one. What is added to the calendar disappears; what is added to an existing meeting holds.
The check: four lines to prepare
These four lines serve whatever happens to the text, and that is what makes them interesting. First: is your processing register filled in, current, and readable by an outsider?
Second: can you name, for every tool you use, where the data goes and who processes it? That is a list of suppliers and countries, not a policy — and it also serves on the day of an incident, where the notification sequence is counted in hours and starts from it.
Third: is there anybody at your end able to write a process on one page? If not, that is the first hire or the first training, before any purchase.
Fourth: do you know where you will look to check whether a text has been published? Write down the address and the date of the next appointment. It is the only line on this list that concerns the strategy itself, and it takes five minutes.
What we do, and what we refuse
We check the state of the text on the date you ask us, and we tell you what it imposes on you — which, to date, is nothing. We prepare the register and the list of flows, which serve in either case.
We refuse to sell compliance with a strategy. A strategy is not a standard, there is nothing to comply with, and a service sold under that name invoices anxiety rather than work.
We also refuse to repeat the announced numeric targets. They are state objectives, and turned into sales arguments they become figures nobody can defend in front of you.
What you can do without us is the whole of section 11’s list. It is useful if the text is adopted tomorrow, it is useful if it is not, and that is the only property that matters when the calendar is unknown. This article describes a state of affairs at a given date and does not replace legal advice on your own situation.
Frequently asked questions
Do we have to do anything now because of the strategy?
No. As of 6 September 2026 it has not been adopted by the Council of Ministers and no implementing text exists. What you have to do comes from the personal data law, which is in force and unrelated to it.
Is there an AI certification to obtain?
None exists at this date. If you are offered one, ask for the text creating it and the body issuing it. A certification with no founding text is a private service wearing an official-sounding name.
Does this change anything for our personal data?
Nothing for now. The applicable regime is law 18-07 of 10 June 2018, amended and completed by law 25-11 of 24 July 2025, and it obliges you independently of any sectoral strategy.
Should we wait before launching a project?
No, and waiting costs more than starting small. Nothing announced makes a project retroactively non-compliant, and the decisions that matter — which process, what volume, who watches — depend on no text.
Will the announced support apply to us?
Impossible to say before the criteria are published, and they will be published by the body running the scheme, not by the strategy. Follow the body rather than the announcement, and check track-record conditions early.
How do we know the text has finally been published?
Through official publication, never through the press. A quarterly twenty-minute appointment is enough, and a negative answer three times out of four is a useful result: it confirms nothing has changed for you.
Where we come in
A deadline that approaches in the press and nowhere else is a good reason to check once and for all.
- We date the situation on the day you call and name precisely what applies to you.
- Your compliance documents are put in order, since they serve whatever follows.
- You leave with the official address to consult and the day of the next check written on it.
An orientation document is not invoiced as an obligation: no service under that name will come from here.
Read next
What you are allowed to send to a model hosted abroad
A chatbot connected to your mailbox exports your customer file, one line at a time. Nobody around the table described it that way.The processing register, filled in on a real case
A twelve-person firm loses a tender on a document it had never heard named. Here are the six columns, filled in on a real assistant.The regional audit divisions: what an inspection asks for, in what order
An inspection begins with a list of documents, not with a visit. There are four, they are known, and nothing stops you producing them first.
Let us talk about your project
A free audit, no commitment: we look at your online presence and tell you what is holding it back.