PrivacyTerrain

Editorial caveat

Structured values summarize official materials for research and planning. They are reviewed by humans before publication and should not be treated as legal advice.

medium confidence, Needs cleanup around modernization changes and database-law overlays.

At a glance

Key presentation points

A compact summary of high-signal fields before the full structured record.

Effective statusin-force1 primary + 1 secondary • Reviewed 17/04/2026

Territorial scopeApplies to database owners, holders, and managers operating within Israel, with transfer and security obligations extending through regulations.1 primary + 1 secondary • Reviewed 17/04/2026

Requires legal basisNo1 primary + 1 secondary • Reviewed 17/04/2026

Maximum fineEnforcement combines administrative oversight, criminal exposure, and civil claims depending on the violation.1 primary + 1 secondary • Reviewed 17/04/2026

Structured record

Regulation details grouped by topic

Each value keeps its field context, linked sources, notes, and review date together to avoid detached or ambiguous statements.

Identity

Effective status: in-forceSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Protection of Privacy Law text (primary); Privacy Protection Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.
Law status: activeSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Protection of Privacy Law text (primary); Privacy Protection Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.
Effective date: 1981-02-23Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Protection of Privacy Law text (primary); Privacy Protection Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.
Last amended: 2025-08-14Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Protection of Privacy Law text (primary); Privacy Protection Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.

Scope

Extraterritorial application: NoSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Protection of Privacy Law text (primary); Privacy Protection Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.
Territorial scope: Applies to database owners, holders, and managers operating within Israel, with transfer and security obligations extending through regulations.Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Protection of Privacy Law text (primary); Privacy Protection Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.
Private sector coverage: Applies to private database owners and holders subject to registration, security, and use-limitation obligations.Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Protection of Privacy Law text (primary); Privacy Protection Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.
Public sector coverage: Public authorities are also subject to the law and security regulations for databases.Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Protection of Privacy Law text (primary); Privacy Protection Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.

Definitions

Personal data definition: Personal information covers data about a person’s private affairs, personality, intimate status, health, economic condition, and similar matters.Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Protection of Privacy Law text (primary); Privacy Protection Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.
Sensitive data recognized: YesSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Protection of Privacy Law text (primary); Privacy Protection Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.

Legal Basis

Legal bases: consent, statutory authorization, legitimate operational basis under database rulesSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Protection of Privacy Law text (primary); Privacy Protection Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.
Requires legal basis: NoSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Protection of Privacy Law text (primary); Privacy Protection Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.

Rights

Right of access: YesSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Protection of Privacy Law text (primary); Privacy Protection Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.
Right to deletion: YesSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Protection of Privacy Law text (primary); Privacy Protection Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.
Right to object: NoSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Protection of Privacy Law text (primary); Privacy Protection Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.
Right to portability: NoSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Protection of Privacy Law text (primary); Privacy Protection Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.
Right to appeal: YesSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Protection of Privacy Law text (primary); Privacy Protection Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.

Breach

Breach deadline (hours): 0Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Protection of Privacy Law text (primary); Privacy Protection Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.
Breach notification required: YesSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Protection of Privacy Law text (primary); Privacy Protection Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.

Governance

DPO required: NoSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Protection of Privacy Law text (primary); Privacy Protection Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.
Impact assessment required: NoSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Protection of Privacy Law text (primary); Privacy Protection Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.
Records of processing required: YesSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Protection of Privacy Law text (primary); Privacy Protection Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.

Enforcement

Maximum fine: Enforcement combines administrative oversight, criminal exposure, and civil claims depending on the violation.Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Protection of Privacy Law text (primary); Privacy Protection Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.
Private right of action: YesSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Protection of Privacy Law text (primary); Privacy Protection Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.

Transfers

Cross-border transfer restricted: YesSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Protection of Privacy Law text (primary); Privacy Protection Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.
Data localization required: NoSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Protection of Privacy Law text (primary); Privacy Protection Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.

Marketing

Cookie consent rule: Cookie compliance is influenced by consent expectations, database law, and sector-specific communications practice.Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Protection of Privacy Law text (primary); Privacy Protection Authority guidance (secondary)Note: Seeded as part of the first regional expansion wave. Requires follow-up editorial review.

Official sources

Protection of Privacy Law textPrimary official law • en • html
Privacy Protection Authority guidanceSecondary official material • en • html

Israel