Technology, Data & Cyber in Israel

Essentials guide · Source-checked research73% of statements checked against a source9 checked against an official source32 checked against a secondary sourceChecked 2026-10-195 held back until checked against an official source8 topics include AI-written statements, not source-checkedNot yet professionally reviewed

• Personal data in Israel is governed by the Protection of Privacy Law, 1981, enforced by the Privacy Protection Authority.

  Applies to private and public sector databases.Pearl Cohen · checked 2026-10-19

• Amendment 13 to the Protection of Privacy Law took effect in August 2025, merging and widening the definitions of personal data, removing the registration duty for most databases and giving the Privacy Protection Authority power to impose financial sanctions.

  Registration remains for direct mailing databases with at least 10,000 individuals and for public bodies; holders of highly sensitive data on more than 100,000 people have a reporting duty. Financial sanctions of up to NIS 320,000, including for data security breaches. Public bodies, banks, direct mailing services and large-scale processors must appoint a privacy protection officer.Meitar Law Offices · checked 2026-10-19

• The Privacy Protection (Data Security) Regulations, 2017 classify databases into security levels by data sensitivity and scale, require documentation such as a database definition document and a written information security procedure, and require notification of security incidents to the Privacy Protection Authority for medium and high security databases.

  Requirements vary by database category.Chambers and Partners (Or-Hof Law) · checked 2026-10-19

• The Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 2001 prohibit transfers from Israel unless the destination ensures a level of protection at least equal to Israeli law, or an exemption applies, such as informed consent, transfer to a Convention 108 state, a country recognised as adequate by the European Commission, or contractual safeguards.

  Chambers and Partners (Or-Hof Law) · checked 2026-10-19

• The European Commission recognises Israel as providing an adequate level of protection for personal data transferred from the EU.

  On 15 January 2024 the Commission published its first review of the eleven adequacy decisions adopted under Directive 95/46/EC.European Commission · checked 2026-10-19

• Israel requires an allocation number from the Israel Tax Authority on business-to-business tax invoices above a threshold for the buyer to deduct input VAT.

  The threshold was NIS 25,000 (excluding VAT) in 2024 and NIS 20,000 for invoices dated from 1 January 2025, with further reductions planned. Without a number the buyer cannot deduct the input tax.Herzog Fox & Neeman · checked 2026-10-19

Read the full guide: Data protection and cyber