Israel
Tier 3 Comprehensive law Middle EastPrincipal framework: Privacy Protection Law 1981 (Amendment 13) (1981). Regulator: Privacy Protection Authority. Amendment 13 — the biggest reform since 1981 — took effect 14 August 2025, modernising definitions and giving the PPA real fining powers. EU adequacy (2011) was reaffirmed in the 2024 review.
At a glance
- Principal law
- Privacy Protection Law 1981 (Amendment 13)
- Regulator
- Privacy Protection Authority
- Breach notification
- Serious incidents notified to the PPA immediately under the Security Regulations
- Maximum penalty
- Amendment 13 introduced significant administrative fines scaled to violation and size
- DPO required
- Amendment 13 makes DPOs mandatory for large-scale or sensitive processing
- Digital consent age
- No statutory digital age — guardianship rules
- Extraterritorial reach
- Database and processing links to Israel
Structure
- Structural pattern
- Not assessed
- Sub-jurisdictions
- None — no sub-national axis
- ISO code
- IL
A Pattern 4 jurisdiction has no sub-national layer to model. Devolution elsewhere in the legal system does not imply it here — check each Act rather than reasoning from the country.
Transfers and adequacy
- EU member
- No
- EEA member
- No
- Holds EU adequacy
- Yes
- Granted
- 31 January 2011
- Review
- Confirmed Jan 2024 review
Israel; 1995 Directive (Dec. 2011/61/EU).
Instruments
No instrument profiled yet.
Sources
- Primary Adequacy decision
Never independently verified — seeded from the prototype.