Israel

Substantial

Protection of Privacy Law 5741-1981 (amended)

Authority: Privacy Protection Authority (PPA) | Enforcement: Active | Enacted: January 1981

Overview

Israel's privacy law dates to 1981 with significant amendments. It has EU adequacy status. The Privacy Protection Authority enforces database registration and compliance. Comprehensive reform proposed to modernise the framework.

14-Topic Coverage

Data Protection Authority

Fully Addressed

PPA oversees database registration, compliance, and enforcement.

Data Subject Rights

Fully Addressed

Rights to access, correction, and deletion of data in registered databases.

Cross-Border Transfer

Fully Addressed

Transfers to adequate countries. Additional safeguards for other jurisdictions.

Breach Notification

Partially Addressed

Regulations require notification to PPA for security incidents. Individual notification evolving.

DPO Requirements

Partially Addressed

Database manager must be appointed. Information security officer required for certain databases.

Children's Data

Partially Addressed

General provisions apply. Student data has specific protections.

Penalties & Enforcement

Fully Addressed

Criminal penalties for privacy violations. Administrative enforcement through PPA.

Sector-Specific Rules

Fully Addressed

Banking, health, credit, and telecom sector specific data rules.

AI & Automated Decisions

Partially Addressed

AI policy framework published. No specific legislation yet.

Data Localisation

Not Addressed

No general data localisation requirement.

Significant Data Fiduciary

Not Addressed

Database registration tiered by size but no SDF equivalent.

Government Data

Fully Addressed

Government databases subject to registration and compliance. Freedom of Information Law applies.