Israeli Legislation.com
RegulationsCivil Law

Privacy Protection (Information Security) Regulations, 5777-2017

תקנות הגנת הפרטיות (אבטחת מידע), תשע"ז-2017

Published: 2023-09-18Last amended 2023-09-18✓ Amendment status checked against the Knesset legislation record on 2026-09-04
Premium
Unofficial English translation — for reference only. It may contain errors or omissions and cannot be relied on as a legal text. Only the Hebrew text published in Reshumot is legally binding.More

This English text was translated from the official Hebrew using a range of translation tools, and it undergoes ongoing checks and updates. It is not a certified translation.

Despite these checks, it may contain errors, omissions, or imprecise renderings of legal terminology and cross-references, and it may not yet reflect the latest amendments. It cannot be relied upon as a legal text.

The Hebrew text as published in Reshumot (ספר החוקים) and on the Knesset website is the sole authoritative and legally binding version. In any discrepancy, the Hebrew text prevails.

This translation is provided for informational purposes only and does not constitute legal advice. For use in legal proceedings, request a certified Expert Legal Opinion.

First Schedule (regulation 1 and the Second Schedule)

1.§

Databases to which the medium security level applies —

(1)a database whose primary purpose is the collection of information for the purpose of transferring it to another person in the ordinary course of business, including direct mailing services;
(2)a database whose owner is a public body as that term is used in section 23 of the Law, even if the provisions of item (1) or (3) are not satisfied in respect of it;
(3)a database that includes information that is any of the following:
(a)information about a person's private life, including conduct in the private domain;
(b)medical information or information about a person's mental state;
(c)genetic information as defined in the Genetic Information Law, 5761-2000;
(d)information about a person's political opinions or religious beliefs;
(e)information about a person's criminal record;
(f)communications data as defined in the Criminal Procedure Law (Enforcement Powers — Communications Data), 5768-2007;
(g)biometric information;
(h)information about a person's assets, debts and financial obligations, financial situation or a change therein, ability to meet financial obligations and the extent to which they are met;
(i)consumption habits of a person that are capable of revealing information within the meaning of items (a) to (g) or a person's personality, beliefs or opinions.
2.§

Notwithstanding the provisions of item 1(3), the medium security level does not apply, but rather the basic security level applies, to a database that satisfies any of the following:

(1)the database includes information of the types listed in item 1(3)(b), (e), (f), (g) with respect to facial images only, and (h), about the employees or suppliers of the database owner, provided that the information is used for business management purposes only and does not include information of the types listed in item 1(3)(a), (c), (d) and (g) with respect to information that is not facial images, and (i);
(2)the number of authorised persons at the database owner does not exceed ten.

Need to cite this law in a foreign court?

Eli Shimony Israeli Attorneys-at-Law provides certified Expert Legal Opinions on Israeli law within 24–48 hours, accepted by courts worldwide.

Contact Us →

Second Schedule (regulation 1)

Databases to which the high security level applies —

(1)a database as referred to in item 1(1) or (3) of the First Schedule, including a database of a public body as that term is used in section 23(1) of the Law that satisfies the provisions of items (1) or (3), which contains information about 100,000 persons or more;
(2)a database as referred to in item 1(1) or (3) of the First Schedule, including a database of a public body as that term is used in section 23(1) of the Law that satisfies the provisions of items (1) or (3), in which the number of authorised persons exceeds 100.

Need to cite this law in a foreign court?

Eli Shimony Israeli Attorneys-at-Law provides certified Expert Legal Opinions on Israeli law within 24–48 hours, accepted by courts worldwide.

Contact Us →

Page 2 of 2

Read the entire law on one page — continuous text, no page breaks, plus PDF downloads.