What Is Protection of Privacy Law, 5741-1981, as amended by Amendment 13?
The current Knesset National Legislation Database marks the Protection of Privacy Law, 5741-1981 as valid and lists Amendment 13, published 14 August 2024, as the latest direct amendment. Current Privacy Protection Authority materials state that Amendment 13 entered into force on 14 August 2025 and describe an updated personal-information and database framework — the Hebrew statutory text controls over any English reference material. Israel's law provides a right to inspect personal information and a right to request correction of information that is incorrect, incomplete, unclear, or not up to date. The Authority's access guidance states the inspection regulations require an access request to be answered within 30 days. These are bounded access and correction rights, not a general erasure right or a guaranteed favorable result. The direct-marketing provisions separately require identification of the database, controller, information sources, and a removal address. They allow a person to demand in writing that information about them be deleted from a direct-marketing database, or not be supplied to specified recipients, with a Magistrate Court route available if there is no written action notice within 30 days — narrower than a universal data-broker or public-record deletion right. Amendment 13 guidance also describes personal-use and conditional small-contact-information exclusions from the regulated database definition; these do not make every contact list or personal collection subject to the same obligations.
At a glance
- Full name
- Protection of Privacy Law, 5741-1981, as amended by Amendment 13
- Short code
- Privacy Law 5741-1981
- Jurisdiction
- Israel
- Enacted
- 1981
- Last major update
- Amendment 13, published 14 August 2024, entered into force 14 August 2025
- Regulator
- Privacy Protection Authority (PPA)
- Private right of action
- Limited
- Statutory citation
- Protection of Privacy Law, 5741-1981, as amended by Amendment 13
Scope, who Privacy Law 5741-1981 covers
Protected data
Data subject rights
Inspection of personal information held about the data subject
Correction of information that is incorrect, incomplete, unclear, or not up to date
A 30-day controller response deadline for access requests, per the Authority's access guidance
Written demand for deletion from a direct-marketing database, or non-supply to specified recipients, with a Magistrate Court route if no written action notice arrives within 30 days
Notable features
Israel's direct-marketing-database deletion right is real and specific, but materially narrower than a general erasure or public-record deletion right: it applies to information supplied for direct-marketing use in a database meeting the statutory database definition, not to any personal data a broker might hold about someone. Official materials expose a current PPA contact route and specialized database/controller forms, but the review did not confirm a universal individual complaint portal, a broker-specific endpoint, or a public-record removal route.
Enforcement & penalties
Regulator: Privacy Protection Authority (PPA)
Penalties: Not independently confirmed in the 7 September 2026 review; a future update should verify the current administrative and criminal-enforcement penalty schedule directly from the amended statute before publication.
Private right of action: The direct-marketing-database deletion demand carries a Magistrate Court escalation route if the controller fails to give written notice of action within 30 days. The current Privacy Protection Authority identifies itself as Israel's regulatory and enforcing authority for personal digital information across private, business, and public entities, with administrative and criminal enforcement — this verifies institutional authority, not a guaranteed investigation or remedy.
Relevance to data brokers
No confirmed universal individual complaint portal, broker-specific endpoint, or public-record removal route has been located beyond the narrower direct-marketing-database deletion demand described above. The complete Hebrew statutory scope, sector exceptions, transfer/security rules, and transition provisions still require provision-level review.
Generate requests in under 60 seconds
Generate removal requests for 1,034 US/global profiles, $9
FAQ
Can I get my information deleted from a direct-marketing list in Israel?+
Yes. The law lets you demand in writing that information about you be deleted from a direct-marketing database, or not supplied to specified recipients. If the controller does not give written notice of action within 30 days, you can escalate to the Magistrate Court. This is narrower than a general, universal erasure right.
How long does a company have to respond to an access request in Israel?+
The Privacy Protection Authority's access guidance states the inspection regulations require an access request to be answered within 30 days.
Official sources & citations
Other international privacy regimes
Privacy Law 5741-1981 sits in a global ecosystem of data-protection laws. Compare with other jurisdictions that shape cross-border data flows: