Israel Privacy Protection Regulations 2024
Enhanced data security requirements including biometric data protections and AI governance provisions.
| Jurisdiction | Israel |
|---|---|
| Category | Privacy & Data Protection |
| Status | Active |
| Latest development |
Analysis
Key Requirements
- Expanded definitions of Personal Data and Highly Sensitive Information: Personal Data now includes any data related to an identified or identifiable person, while Highly Sensitive Information covers biometric data, genetic data, precise geolocation, criminal records, and data subject to confidentiality obligations, requiring stricter handling and consent.Israel's Amendment To The Privacy Protection Law - Cilynx Israel Enacts Comprehensive Privacy Law Amendment - NatLawReview Overview of Amendment No. 13 - TechPolicy
- Reduced database registration obligations: Registration is required only for databases processing data of over 10,000 individuals with transfers, public bodies, or those handling Highly Sensitive Data for over 100,000 individuals; smaller entities face simplified notifications.Israel's Amendment To The Privacy Protection Law - Cilynx Data Protection Laws in Israel - DLA Piper Data Protection Laws and Regulations Israel - ICLG
- Appointment of a Data Protection Officer (DPO): Certain databases, especially those with large-scale sensitive data processing, must appoint a DPO to oversee compliance.Israel's Amendment To The Privacy Protection Law - Cilynx Overview of Amendment No. 13 - TechPolicy Israel | Jurisdictions - OneTrust DataGuidance
- Enhanced data subject rights and breach notifications: Expanded notice obligations for data collection and breaches, plus rights to access, correction, and deletion, with no proof of damage needed for compensation claims.Israel Enacts Comprehensive Privacy Law Amendment - NatLawReview Overview of Amendment No. 13 - TechPolicy Data Protection Laws and Regulations Israel - ICLG
Compliance Challenges
- Adapting to broadened definitions and processing scopes: Organizations struggle with reclassifying data as "Highly Sensitive," especially biometric and geolocation data, leading to retroactive compliance gaps for legacy systems.Israel's Amendment To The Privacy Protection Law - Cilynx Israel Enacts Comprehensive Privacy Law Amendment - NatLawReview Overview of Amendment No. 13 - TechPolicy
- Mandatory DPO appointment for qualifying databases: Small and medium enterprises face resource strain in hiring or training DPOs, particularly without prior GDPR-like experience.Israel's Amendment To The Privacy Protection Law - Cilynx Data Protection Laws in Israel - DLA Piper Charting its own path - IAPP
- Heightened enforcement and penalties: Businesses risk fines up to 5% of annual turnover or millions in ILS for violations like unauthorized processing, with challenges in auditing large-scale operations.Israel Enacts Comprehensive Privacy Law Amendment - NatLawReview Overview of Amendment No. 13 - TechPolicy Data Protection Laws and Regulations Israel - ICLG
Implementation Best Practices
- Conduct a data mapping and classification audit: Identify all Personal and Highly Sensitive Data, update processing purposes, and align with new definitions using risk-based assessments.Israel's Amendment To The Privacy Protection Law - Cilynx Israel Enacts Comprehensive Privacy Law Amendment - NatLawReview Understanding Israel's Privacy Protection Law - Pandectes
- Appoint and train a DPO early: Select a qualified DPO for large or sensitive databases and integrate them into governance; use frameworks like those from the PPA for training.Overview of Amendment No. 13 - TechPolicy Amendment No 13 Israeli Privacy Protection Law - TrustIZ Israel Privacy Protection Bill Webinar - OneTrust
- Update privacy notices, consents, and breach protocols: Enhance notices for collection and breaches, implement automated tools for subject rights requests, and test response plans.Israel Enacts Comprehensive Privacy Law Amendment - NatLawReview Data Protection Laws in Israel - DLA Piper Data Protection Laws and Regulations Israel - ICLG
Recent Updates
- Amendment No. 13 approved on August 5, 2024: Key changes include expanded definitions, DPO requirements, reduced registrations, and PPA enforcement powers; effective dates vary slightly by source as August 6, 2025, August 14, 2025, or August 15, 2025, with full compliance expected by mid-August 2025.Israel's Amendment To The Privacy Protection Law - Cilynx Israel Enacts Comprehensive Privacy Law Amendment - NatLawReview Overview of Amendment No. 13 - TechPolicy
- Increased penalties and criminal offenses: Fines scaled by violation impact and turnover (up to 5%), with imprisonment up to 5 years for severe breaches like unauthorized disclosure.Charting its own path - IAPP Data Protection Laws and Regulations Israel - ICLG Israel | Jurisdictions - OneTrust DataGuidance
- Potential further amendment noted: Ministry of Justice hints at additional changes post-Amendment 13, but no effective dates yet.Overview of Amendment No. 13 - TechPolicy Israel Privacy Protection Bill Webinar - OneTrust
Related Regulations
- Basic Law: Human Dignity and Liberty (1992): Provides constitutional privacy foundation, overlapping with PPL by protecting against dignity intrusions; Amendment 13 strengthens enforcement alignment.Data Protection Laws in Israel - DLA Piper Data Protection Laws and Regulations Israel - ICLG Israel | Jurisdictions - OneTrust DataGuidance
- EU GDPR similarities: Amendment 13 mirrors GDPR in definitions (e.g., Highly Sensitive akin to Special Categories), processing breadth, and rights, aiding cross-border transfers for Israel-EU adequacy.Israel Enacts Comprehensive Privacy Law Amendment - NatLawReview Overview of Amendment No. 13 - TechPolicy Charting its own path - IAPP
- PPA Guidelines and prior PPL regulations: Existing rules on databases interact by narrowing registrations while expanding processing oversight and breach reporting.Israel's Amendment To The Privacy Protection Law - Cilynx Understanding Israel's Privacy Protection Law - Pandectes
Industry Impact
- Tech and data-heavy sectors face highest penalties: Firms processing large-scale biometric or geolocation data (e.g., fintech, health tech) risk fines up to millions ILS, prompting governance overhauls.Israel Enacts Comprehensive Privacy Law Amendment - NatLawReview Charting its own path - IAPP Data Protection Laws and Regulations Israel - ICLG
- Eased burden for SMEs via reduced registrations: Smaller organizations benefit from simplified compliance, but all must enhance notices and rights handling, impacting HR and marketing.Israel's Amendment To The Privacy Protection Law - Cilynx Overview of Amendment No. 13 - TechPolicy Israel | Jurisdictions - OneTrust DataGuidance
- Boost to Israel's data adequacy status: GDPR-like reforms strengthen global transfers, benefiting export-oriented industries like cybersecurity.Israel Enacts Comprehensive Privacy Law Amendment - NatLawReview Amendment No 13 Israeli Privacy Protection Law - TrustIZ
Sources
- Israel's Amendment To The Privacy Protection Law - Cilynx
- Israel Enacts Comprehensive Privacy Law Amendment - NatLawReview
- Data Protection Laws in Israel - DLA Piper
- Overview of Amendment No. 13 - TechPolicy
- Israel Privacy Protection Bill Webinar - OneTrust
- Charting its own path - IAPP
- Understanding Israel's Privacy Protection Law - Pandectes
- Amendment No 13 Israeli Privacy Protection Law - TrustIZ
- Data Protection Laws and Regulations Israel - ICLG
- Israel | Jurisdictions - OneTrust DataGuidance
Recent developments
- — Israel's Amendment 13 is tracked as a key 2026 global trend, emphasizing data access governance risks for firms processing Israeli resident data extraterritorially under heightened penalties.[8] (source)
Related regulations
- UK Data Protection Act 2018 — United Kingdom, Active
- Texas Data Privacy and Security Act (TDPSA) — Texas, Active, effective 2024-07-01
- General Data Protection Law (LGPD) — Brazil, Active, effective 2020-09-18
- COPPA (Children's Online Privacy Protection Act) — United States, Active
- Oregon Consumer Privacy Act (OCPA) — Oregon, Active, effective 2024-07-01
- Montana Consumer Data Privacy Act (MCDPA) — Montana, Active, effective 2024-10-01
- New Hampshire Privacy Act (NHPA) — New Hampshire, Active, effective 2025-01-01
- Nebraska Data Privacy Act (NDPA) — Nebraska, Active, effective 2025-01-01
Put it into practice
- Generate the policy: GDPR policy generator (generatepolicy.com)
- Buy the policy pack: Privacy Program Bundle (cyberpolicy.shop)
- Build it yourself: Privacy Dual Coverage Bundle (ciso.diy)
Browse all regulations · Compliance deadlines · Latest updates