Israel. Comprehensive data protection. Law
PPLProtection of Privacy Law, 5741-1981 (as amended by Amendment No. 13)
In force
§1Summary
- Synopsis
Israel's core privacy statute, covering privacy torts and the regulation of databases. Amendment 13 modernised it with GDPR-aligned definitions, a DPO duty, narrower database registration and strong administrative enforcement powers for the PPA.
- Key themes
- Unique features
Statutory damages without proof of harm; registration now only for data brokers (>10,000 subjects) and public bodies; notice for very large sensitive-data databases (>100,000).
- SaaS relevance
SaaS holding databases of Israeli data subjects (as owner or holder) must meet security, DPO and processor obligations.
§2Obligations
- Extraterritorial
- Limited
- Breach notification
- PPA promptly for severe incidents (per Data Security Regulations); PPA may order individual notice
- DPO
- Conditional
- Cross-border transfers
- Transfer Regulations 2001: comparable protection or listed conditions + written undertaking
- Maximum penalty
- Administrative fines (tiered, per data subject scale) plus criminal sanctions
§3Dates
- Key dates
- Adopted
- In force
- Amendment 13 approved 5 Aug 2024, in force 14 Aug 2025
§4Text and authority
- Text
- No authoritative text located.
- Authority
- Privacy Protection Authority (PPA)
§5Where it applies
- Domestic law of
- Israel
§6Sources and verification
- Verification
High confidence.
Official PPA site returned 403; specific fine amounts under Amendment 13 not verified.