Amendment 13 to Israel’s Privacy Protection Law took effect on 14 August 2025. It changed definitions and enforcement powers, revised database registration and notification arrangements, and introduced a data protection officer requirement for specified categories of organizations.
Check what applies to your organization
Do not assume every business must register every database or appoint a data protection officer. Review your role, the information you process, its scale and sensitivity, and the statutory conditions with an appropriate adviser.
Make this week’s work concrete
List the systems holding personal information, the people who can access them, and the suppliers involved. Check that notices describe actual practices and that someone can respond to a privacy request or an incident.
Keep security and privacy connected
The existing data security regulations remain part of the picture. Amendment 13 did not create all information security duties from scratch. Use one coordinated plan for applicable legal requirements, technical controls, responsibilities, and evidence.