Jordan
ModeratePersonal Data Protection Law No. 24 of 2023
Authority: Ministry of Digital Economy and Entrepreneurship | Enforcement: Pending | Enacted: March 2024
Overview
Jordan enacted its first comprehensive data protection law in 2023, effective March 2024. The law covers personal data processing, data subject rights, cross-border transfers, and establishes penalties. Implementing regulations are being developed.
14-Topic Coverage
Data Protection Authority
Pending EnforcementMinistry of Digital Economy designated as the supervisory authority. Operational capacity building.
Consent Requirements
Fully AddressedConsent required as primary basis. Must be explicit for sensitive data.
Data Subject Rights
Fully AddressedRights to access, rectification, erasure, restriction, and objection.
Cross-Border Transfer
Fully AddressedTransfers to countries with adequate protection. Ministerial approval may be required.
Breach Notification
Fully AddressedMust notify the authority of data breaches.
DPO Requirements
Partially AddressedRequired for certain categories of controllers.
Children's Data
Partially AddressedGeneral sensitive data provisions apply.
Penalties & Enforcement
Fully AddressedFines from JOD 5,000 to JOD 100,000. Criminal penalties for certain offences.
Sector-Specific Rules
Partially AddressedCBJ financial rules, health data regulations.
Cookie/Tracking
Not AddressedNo specific cookie regulation.
AI & Automated Decisions
Not AddressedNo specific provisions.
Data Localisation
Partially AddressedSome sector-specific localisation requirements.
Significant Data Fiduciary
Not AddressedNo equivalent concept.
Government Data
Partially AddressedLaw applies to government with national security exemptions.
Coverage Summary
Quick Navigation
Need Compliance Help?
Our data privacy team can help you navigate Jordan's regulations.
Book a Consultation