Skip to main content
Iran (Islamic Republic of) · Reviewed October 2026

What Is Electronic Commerce Act 2003?

The located Iranian framework is limited. The Electronic Commerce Act 2003 protects certain electronic personal-data messages and states provisions concerning access, amendment or removal of incorrect data, conditional removal of a complete file, and a choice relating to advertising mail or email. The FOI Commission’s current 10-working-day process is limited to covered public-information requests. The supplied research did not establish that this process is a general personal-data complaint or access route. No comprehensive enacted data-protection law, standalone data-protection authority, or general data-broker route was located in the supplied search. This profile therefore keeps the Electronic Commerce Act provisions separate from the limited FOI process.

Rahul Kandoriya
Written byRahul Kandoriya·Founder, OfflistMe·Last updated October 9, 2026

At a glance

Full name
Electronic Commerce Act 2003
Short code
Iran Electronic Commerce Act 2003
Jurisdiction
Iran (Islamic Republic of)
Enacted
2003
Regulator
No dedicated data-protection regulator located; the FOI Commission process is limited to covered public-information requests
Private right of action
Limited

Scope, who Iran Electronic Commerce Act 2003 covers

Certain electronic personal-data messages addressed by the Electronic Commerce Act 2003; the supplied research did not establish a comprehensive territorial, sectoral, or exemption map.

Protected data

Certain electronic personal-data messages protected by the located Act; the supplied research did not itemize broader protected-data categories.

Data subject rights

Access to certain electronic personal-data messages, as stated in the located Act

Amendment or removal of incorrect data, as stated in the located Act

Conditional removal of a complete file, as stated in the located Act

Choice relating to advertising mail or email, as stated in the located Act

A 10-working-day FOI Commission process for covered public-information requests, not a confirmed general privacy route

Notable features

The located protections are sectoral or instrument-limited rather than a comprehensive enacted data-protection framework. The FOI Commission’s 10-working-day process is kept separate because the supplied research limits it to covered public-information requests.

Enforcement & penalties

Regulator: No dedicated data-protection regulator located; the FOI Commission process is limited to covered public-information requests

Penalties: The supplied research summary did not provide a consolidated privacy penalty schedule or amount, so no penalty figure is stated here.

Private right of action: The supplied materials identify limited statutory and public-information processes but do not establish a general private damages action for personal-data disputes.

Relevance to data brokers

No Iran-specific data-broker, people-search, public-record, or general personal-data removal route was located. The Electronic Commerce Act provisions should not be presented as a confirmed broker opt-out process.

Generate requests in under 60 seconds

Explore 1,034 US/global data brokers

OfflistMe helps draft opt-out requests using the details you choose. Paid one-time plans start at $9 and include 5, 50 or 500 credits (1 credit = one run that generates removal requests for all available data brokers). Review the provider route and legal basis, then send from your own inbox. The tool is not legal advice and does not guarantee a broker's response.

FAQ

What Iranian privacy protections were located?+

The supplied research identifies Electronic Commerce Act provisions for access, amendment or removal of incorrect data, conditional complete-file removal, and a choice relating to advertising mail or email.

Is Iran’s FOI Commission process a general privacy complaint route?+

No. The supplied research describes the current 10-working-day process as limited to covered public-information requests, not as a general personal-data route.

Does Iran have a comprehensive data-broker removal route?+

No comprehensive enacted data-protection law, standalone data-protection authority, or general broker route was located in the supplied research pass.

Official sources & citations

Other international privacy regimes

Iran Electronic Commerce Act 2003 sits in a global ecosystem of data-protection laws. Start with these comparative frameworks, or visit the privacy research hub for the complete jurisdiction index:

Related concepts & guides