Privacy Law at Israel
Israel's data protection framework has undergone significant reforms to align more closely with international standards, particularly the European Union's General Data Protection Regulation (GDPR). The cornerstone of this framework is the Protection of Privacy Law, 5741-1981 (IPPL), which has been substantially amended to enhance privacy protections.
🧾 Key Provisions of the Protection of Privacy Law (IPPL)
The original IPPL, enacted in 1981, established fundamental privacy rights, including
Infringement of Privacy Defined various acts as infringements, such as unauthorized surveillance, photographing individuals in private settings, and unauthorized use of personal information
Database Regulations:Imposed requirements on database owners regarding data security, transparency, and individuals' rights to access their personal datauthorized data processing
🔄 Amendment No. 13 (2024): Aligning with GDPR
In August 2024, Israel's Knesset enacted Amendment No. 13 to the IPPL, introducing comprehensive changes effective from January 1, 2025 Key updates include:
Expanded Definitions:
Personal Information Broadened to encompass any data related to an identified or identifiable perso.Highly Sensitive Information Introduced categories akin to GDPR's Special Categories, such as biometric data, genetic data, and criminal records
Data Processing Expanded to include all operations on information, including collection, storage, and transfe.
Mandatory Appointments:
Privacy Protection Officer Required for entities processing sensitive data on a significant scale, similar to the GDPR's Data Protection Office.
Data Security Officer Expanded obligations for data security roles within organizations
Enhanced Enforcement Powers:
Financial Penalties Fines up to 5% of annual turnover for large organizations; up to ILS 140,000 for small businesse.
Regulatory Actions Authority to issue warnings, suspend database registrations, and mandate data deletion
Data Subject Rights:
Right to Deletion Individuals can request deletion of personal data, especially if no longer necessar.
Retention Limitations Obligations to ensure data is not held longer than necessary for its intended purpose
🛡️ Enforcement and Penaltie
The Privacy Protection Authority (PPA), Israel's regulatory body, has been empowered wih:
*Investigative Powers: Authority to conduct inquiries and seize materials under court ordes.
*Corrective Measures: Ability to issue warnings, suspend operations, and mandate corrective actios.
*Criminal Liabilities: Penalties ranging from fines to imprisonment for severe violations
🌍 International Implicatios
The amendments align Israel's data protection laws with global standards, facilitatng:
*Data Transfers: Easier compliance with international data transfer agreemets.
*Business Operations: Enhanced trust and operational efficiency for businesses handling personal dta.
📝 Concluson
Israel's updated privacy legislation represents a significant step toward robust data protection, emphasizing transparency, accountability, and individual rihs. Organizations operating in Israel must prepare for these change by:
Appointing necessary offiers
Reviewing data processing practces
Ensuring compliance with new regulatory requiremnts
For detailed guidance, consulting with legal professionals specializing in Israeli data protection law is advisble.
RELATED Blog
0 comments