Israel. Data localisation / cross-border. Regulations

EEA Data RegulationsProtection of Privacy Regulations (Instructions for Data Transferred to Israel from the European Economic Area), 5783-2023

In force

§1Summary

Synopsis

Adds deletion, retention limitation, accuracy and notification duties for personal data received from the EEA, and expands sensitive categories for such data.

Key themes
  • EEA data
  • deletion
  • accuracy
  • transparency
  • sensitive data
Unique features

Treats ethnic origin and trade union membership as sensitive for EEA-sourced data.

SaaS relevance

Israel-based SaaS handling EU customer data must apply these enhanced duties.

§2Obligations

Extraterritorial
No

§3Dates

Key dates
  • Adopted
  • In force
  • Supported renewal of EU adequacy in Commission's January 2024 review

§4Text and authority

Text
Authority
Privacy Protection Authority (PPA)

§5Where it applies

Domestic law of
Israel

§6Sources and verification

Verification

High confidence.

[Link: Hebrew Reshumot (MoJ) copy, linked by Pearl Cohen; not loadable from here (geo-restricted)]