New Data Security Regulations Contain New Requirements For Database Administrators

The Constitution, Law and Justice Committee recently approved the Privacy Protection Regulations (Data Security), 5767-2017, which enacts new and comprehensive norms for entities that manage or hold databases regarding data security procedures. In practice, these regulations affect many entities in the Israeli marketplace, from small businesses managing client information databases to large corporations.

For the first time in Israel, the regulation's requirements include the requirement to notify the Registrar of Databases of the Israeli Law, Information and Technology Authority in the Ministry of Justice of severe security events. In some cases, the Registrar may also require the database owner to notify data subjects in the event of a security breach that may harm the subjects.