EdLaw
Israel — Protection of Privacy Law, 5741-1981 (incl. Amendment 13)
Israel's privacy statute, transformed by Amendment 13 (in force August 2025) — GDPR-style definitions (מידע אישי, עיבוד, בעל שליטה במאגר "controller"), a strengthened Privacy Protection Authority with administrative fines, and mandatory privacy-protection officers. Israel holds an EU adequacy decision (reaffirmed 2024), which Amendment 13 was designed to preserve.
Statute text is Hebrew (the authentic language); this README is curation.
Applicability to EdTech
- Lawful processing (סעיף 8): personal information in a database may only be processed for the database's lawfully-set purpose, and only with the controller's authorisation — the frame a platform processing Israeli student data operates in.
- Collection notice (סעיף 11): requests for personal information must state the legal duty or voluntariness, purpose, the controller's identity and contact details, recipients, and the access/correction rights — a concrete UI requirement for Israeli sign-up flows.
- Access and security: data-subject access (סעיף 13); responsibility for information security on the controller, holder and manager (סעיף 17) — the operational layer is the Data Security Regulations 2017 (not extracted).
- DPO duty (סעיף 17ב1): public bodies, data brokers >10,000 subjects, systematic large-scale monitors, and large-scale processors of specially sensitive information must appoint a ממונה על הגנת הפרטיות. A vendor whose core business involves large-scale processing of minors' data should assess פסקה (א)(3)–(4) carefully.
- The tort/offence layer (סעיף 2) — the eleven infringement heads — plus the Amendment-13 definition catalogue (סעיף 3), including מידע בעל רגישות מיוחדת (specially sensitive information); no dedicated child-consent age exists — minors' consent runs through guardianship law (README-level note).
Contents
| Document | Covers |
|---|---|
| HAGANAT-HAPRATIUT.md | סעיפים 2, 3, 8, 11, 13, 17, 17ב1 |
Scope note: the administrative-enforcement chapter (עיצומים כספיים, סעיפים 23כ ואילך) and the Data Security Regulations are the enforcement/operational layer — add on demand.
Enforcement
הרשות להגנת הפרטיות (Privacy Protection Authority, gov.il/privacy); Amendment 13 added administrative fines and investigation powers.
Related
Sources
Meta
Statute text in HAGANAT-HAPRATIUT.md is reproduced verbatim in Hebrew from Nevo's consolidated text by tools/nevo-il/build_il.py. Israel publishes no official consolidation, so Nevo (the standard Israeli legal database) is used; the build asserts Amendment-13 terminology is present and verify re-fetches and diffs the extracted sections.