On March 21, 2017, the Knesset Constitution, Law and Justice
Committee approved the Protection of Privacy Regulations
(Information Security) 5777-2017 (hereinafter: the
"Regulations"). The Regulations mark a
landmark change in the field of information security in Israel and
they impose substantial obligations on database owners. Among the
duties in the Regulations are: the requirement to adopt a
comprehensive policy and procedures on information security,
mapping out the information systems in the organization and
carrying out a risk assessment review, implementing information
security practices in the area of human resources management and
requirements relating to the reporting of security incidents. In
addition, for databases containing information that is more
sensitive, the Regulations establish the requirement to carry out
vulnerability assessments and penetration tests, and the
implementation of advanced security mechanisms. The Regulations
will come into force
