Data Breach Notification Introduced Into Israeli Law

It took the Israeli Justice Department almost 7 years to pass the new regulations. For over 30 years, the Israeli market and public authorities were subject to a vague and outdated set of information security regulations. The old regulations provided very little guidance and were rarely enforced.

4 Security Levels

According to the chairman of the Constitution Law and Justice Committee, the new regulations set a new era in information security. They include a comprehensive set of requirements, which is based on 4 separate levels of information security governance –

• Sub-basic level – up to 3 persons with access permission –mild requirements, including a database description document, annual review of redundant data, basic physical security, reasonable means to prevent unauthorized access, keep records of data breaches, appropriate measures with portable devices (e.g. encryption) and secured internet communications.