Israel

Amendment to Protection of Privacy Law (5741-1981)

On 14 August 2025, the Privacy Protection Bill (Amendment No. 13, formerly No. 14) entered into force. The Bill expands the supervisory powers of the Privacy Protection Authority, which will now have the authority to impose financial sanctions for violations of the Privacy Protection Law. In addition, the Bill establishes the obligation to appoint a privacy protection officer for organisations primarily processing sensitive personal information or the systematic monitoring or tracking of peop...

Privacy Protection Authority's guide pertaining to compliance with Privacy Protection Law's amendment

On 14 August 2025, the Privacy Protection Authority published a guide on Amendment No. 13 to the Privacy Protection Law, enacted in August 2024, which introduces a reform applying to public and private organisations processing personal data. The amendment updates core definitions, reduces the obligation to register databases, requires notification of large sensitive databases, mandates appointment of Data Protection Officers (DPOs), establishes a financial sanctions mechanism, introduces new ...

Data Protection Regulation Authority investigation into Hot Mobile over alleged failure to comply with removal request

On 13 August 2025, the Privacy Protection Authority issued a ruling against Hot Mobile with a fine of NIS 70,000 over failure to comply with a data removal request. It was highlighted that the company operates in the telecommunications sector, and it used a former customer’s personal data after service termination. It was also highlighted that it sent repeated marketing messages despite deletion requests. The company also failed to meet notification obligations and used the data for purposes ...

Privacy Protection Authority statement on implementation of consent principle

On 24 March 2025, the Privacy Protection Authority of Israel closes a public consultation on the statement clarifying the application of the consent principle under national data protection laws. The statement reflects the legal interpretation that the Authority will apply in exercising its various statutory powers, including monitoring compliance with the law and its regulations. The statement clarifies the Authority’s interpretation, emphasising that consent must be informed, clearly presen...

Privacy Protection Authority's guide to privacy-enhancing technologies (PETs)

On 23 February 2025, the Privacy Protection Authority opened a consultation on a Guide to Privacy-Enhancing Technologies (PETs), aiming to provide public bodies, companies, and businesses with insights into digital tools that protect personal information. The guide outlines how PETs can obfuscate personal data, reduce disclosure risks during processing, and enhance control over data access. It categorises technologies by their role in preparing, using, and controlling information throughout i...

Privacy Protection Authority guidance on transfer of ownership of data repositories

On 22 December 2024, the Privacy Protection Authority (PPA) adopted the guidance on the transfer of ownership of data repositories. The guidance outlines the responsibilities of database owners and the conditions under which ownership transfers may occur. It imposes obligations including ensuring the transfer does not alter the purpose of data usage and requiring data subject consent if the purpose changes. It also requires allowing for a simple notification if there is no change in the purpo...

PPA guideline on data transfer outside the borders of the country

On 13 October 2024, the Privacy Protection Authority (DPA) adopted the guideline on data transfer outside the borders of the country. The guideline applies to companies and businesses involved in transferring personal information from Israel to entities abroad. The guideline imposes several obligations on database owners, requiring them to ensure that recipients outside Israel implement adequate measures to safeguard the privacy of data subjects. It also requires that personal information wil...

PPA Guide on log file retention in databases with medium and high-security levels

On 29 September 2024, the Privacy Protection Authority of Israel published the guide to log file retention in databases with medium and high-security levels. The guide applies to companies, businesses, and public entities that manage sensitive databases. The guide sets out the duties of such organisations to retain log files documenting database access for a minimum of two years. The guide also specifies the requirements that logs must capture user identity, date and time of access, system co...

Privacy Protection Authority Directive No. 1/2024 outlining the responsibilities of the board of directors

On 12 September 2024, the Israel Privacy Protection Authority (PPA) published the Privacy Protection Authority Directive No. 1/2024 outlining the responsibilities of the board of directors in companies where personal data processing is core to their operations or poses a high privacy risk. The directive mandates that boards must oversee compliance with data security regulations, ensure the adoption of policies for data management, and immediately report data security incidents to the Privacy ...

Guidelines on the challenges of migrating databases and systems to the cloud

On 5 September 2024, the Israeli government published Guidelines, issued by the Privacy Protection Authority and the Ministry of Justice, discussing the challenges of migrating databases and systems to the cloud, driven by technologies like Artificial Intelligence (AI) and cloud computing, which offer benefits such as scalability and connectivity. In particular, the Guidelines address key challenges including, misconfiguration that can expose data to unauthorised access, unsecured Application...

Privacy Protection Authority's interpretation of Regulation 2(4) of the Privacy Protection Regulations regarding cross-border data transfer

On 8 August 2024, the Privacy Protection Authority closes its public consultation on the draft opinion on the interpretation of Regulation 2(4) of the Privacy Protection Regulations concerning the transfer of data to databases outside Israel. In particular, the draft addresses the conditions under which personal data can be transferred from Israel to another country, focusing on the term "necessary modifications" to ensure that the protection level of the data abroad is not lower than that un...

Israel's Policy on Artificial Intelligence: Regulations and Ethics

Promotes responsible AI innovation through sector-specific regulation, risk-based approaches, and "soft" regulatory tools. Establishes an AI Policy Coordination Center to advise and coordinate AI regulation, fostering international consistency. Recommends adopting ethical AI principles and creating tools for responsible AI development.

Policy document on the collection and use of biometric information in the workplace

On 18 August 2023, the Israel Privacy Protection Authority (PPA) closed its consultation on the draft policy document on the collection and use of biometric information in the workplace. In particular, the policy document addresses concerns about privacy and security risks posed by collecting and storing employees' biometric data without proper consent. While the PPA does not aim to ban the use of biometric identification for attendance monitoring, it emphasises the need to protect employees'...

Guidelines on Private Right of Access to Databases held by Entities under Section 13(e) of the Data Protection Act

On 6 August 2023, the Israel Privacy Protection Authority (PPA) published guidelines on the private right of access to the databases held by entities listed in section 13(e) of the Data Protection Act. In the guidelines, the PPA highlights that individuals have the right to access their information, but the right is not absolute and subject to exceptions. The authorities must assess the justification and proportionality of granting access, especially concerning sensitive databases related to ...

EU-Israel Draft Privacy Protection Regulations

On 23 April 2023, the Israeli House of Representatives adopted the Privacy Protection Regulations for Data Transfers from the European Economic Area to Israel. The Regulations establish four new obligations for data controllers. In particular, the controllers will be required to delete information, follow retention limitations for information that is not considered necessary, ensure the accuracy of the information and notify the data subjects about the processing of their data. The Regulation...

Cybersecurity cooperation in 2030 roadmap for UK-Israel bilateral relations

On 21 March 2023, the governments of the United Kingdom and Israel signed a policy paper entitled “2030 roadmap for UK-Israel bilateral relations”. Under the document, the parties commit to deepening cooperation to promote international security and stability in cyberspace, including through bilateral cooperation on critical national infrastructure and collective efforts to increase mutual resilience against cyber threats.

Memorandum of Understanding signed between Abu Dhabi and Israel on data and privacy protection

On 6 September 2022, the Office of Data Protection of the Abu Dhabi Global Market and the Israeli Privacy Protection Authority signed a Memorandum of Understanding to express mutual understanding of the legislative, procedural, and information technology frameworks on data and privacy protection. The Memorandum also seeks to explore best practices in assisting the authorities in improving the delivery of their respective functions, providing mutual training of staff, and exchanging of views o...

Israel signs the COE AI convention

EUROSAI Parallel Audit on Artificial Intelligence Concludes with Publication of Final Report

Israel and the United States Sign Joint Statement on Artificial Intelligence – Israel is the First Country to Sign a Joint Statement in this Field with the U.S.

Government Decision No. 212 – Program for the advancement of innovation, encouragement of high‑tech sector growth and strengthening Israel's technological and scientific leadership (authorized MIST to develop a national AI strategy)

AI law in Israel: Government Decision No. 212 (adopted 1 August 2021) establishes a multi-year national program to promote innovation, accelerate high‑tech sector growth and strengthen Israel’s technological and scientific leadership. The decision tasks the Ministry of Innovation, Science and Technology (MIST) and partner ministries and agencies with designing and implementing a national AI program (including initial budgets, infrastructure priorities, human capital and public‑sector use) and authorized development of a national AI strategy and associated coordination structures....

Israel’s Policy on Artificial Intelligence Regulation and Ethics (Ministry of Innovation, Science and Technology and Ministry of Justice) - 'Responsible Innovation' AI policy

AI law in Israel: Published in December 2023 by the Israeli Ministry of Innovation, Science and Technology together with the Ministry of Justice, the 'Responsible Innovation' policy sets principled, sectoral, risk-based guidance for AI development and use in Israel. It emphasizes a human-centric approach, international alignment, sectoral regulation led by relevant regulators, and pragmatic tools such as sandboxes and soft regulation rather than immediate broad horizontal legislation....

White Paper: Principles of Policy, Regulation and Ethics in Artificial Intelligence (Ministry of Innovation, Science and Technology) - (White Paper published for public consultation)

AI law in Israel: A white paper published by Israel's Ministry of Innovation, Science and Technology (published for public consultation in late 2022) that sets out policy principles, ethical guidelines and a regulatory policy approach for AI. It recommends a sector-based, risk-driven regulatory strategy, alignment with OECD principles, creation of a government coordination/knowledge center and use of soft/regulatory experiment tools while emphasizing human-centric protections such as transparency, non-discrimination and accountability....

Government Decision No. 173 – Adoption of the National Program for Artificial Intelligence / Strengthening Israel's technological leadership (national AI program approved, budget authorization and implementation roadmap)

AI law in Israel: On 24 February 2023 the Government of Israel adopted Government Decision No. 173, approving a National Program for Artificial Intelligence to strengthen Israel’s technological leadership. The decision authorized a budget commitment authorization of up to NIS 500 million to be realized in 2023–2026, set priorities for accelerating research and building national AI infrastructure, and instructed establishment of a government knowledge/coordination centre for AI implementation and policy coordination. (library.mevaker.gov.il)...

Office of Legal Counsel and Legislative Affairs (Ministry of Justice) opinion on the use of copyrighted works for machine‑learning purposes

AI law in Israel: On 18 December 2022 the Office of Legal Counsel and Legislative Affairs at Israel’s Ministry of Justice published a non‑binding legal opinion concluding that, in general and subject to caveats, the use of copyrighted works to train machine‑learning systems is permissible under existing provisions of the Israeli Copyright Act (notably fair use, incidental use and transient/ephemeral use). The opinion applies to the training/process stage (not to downstream outputs) and highlights exceptions where permission remains necessary....

Privacy Protection Authority opinion / guidance on algorithmic processing and notification obligations (automated decision‑making guidance)

AI law in Israel: In July 2022 the Israeli Privacy Protection Authority (PPA) published a formal opinion clarifying the statutory notification duty when collecting and using personal data and set out expanded transparency expectations where processing involves algorithmic or AI-driven automated decision‑making. The guidance emphasizes informed consent, contextual notice, and additional disclosure where automated systems materially affect data subjects....