Israel. Cybersecurity. Regulations
Data Security RegulationsProtection of Privacy Regulations (Data Security), 5777-2017
In force
§1Summary
- Synopsis
Detailed security requirements for database owners, holders and managers, scaled by the security level of the database, including policies, access controls, audits, training and incident reporting.
- Key themes
- Unique features
Tiered obligations (basic, medium, high) and explicit outsourcing duties when using service providers.
- SaaS relevance
SaaS vendors as database holders must implement the security level of their customers' databases and accept outsourcing terms.
§2Obligations
- Extraterritorial
- Limited
- Breach notification
- PPA for severe incidents (immediately per PPA guidance)
- DPO
- Conditional
§3Dates
- Key dates
- Adopted
- In force
§4Text and authority
- Text
- Authoritative text gov.il
- English text gov.il
- Authority
- Privacy Protection Authority (PPA)
§5Where it applies
- Domestic law of
- Israel
§6Sources and verification
- Verification
High confidence.
[Link: PPA English translation on gov.il; Hebrew original is binding]