Support Centre

You have out of 5 free articles left for the month

Signup for a trial to access unlimited content.

Start Trial

Continue reading on DataGuidance with:

Free Member

Limited Articles

Create an account to continue accessing select articles, resources, and guidance notes.

Free Trial

Unlimited Access

Start your free trial to access unlimited articles, resources, guidance notes, and workspaces.

EU - Israel: GDPR v. PPL

In this report, OneTrust DataGuidance provides a means of analyzing and comparing data protection requirements and recommendations under the General Data Protection Regulation (GDPR) and the Protection of Privacy Law, 5741-1981 (the PPL).

The report examines and compares the scope, main definitions, legal bases, data controller and processor obligations, data subject rights, and enforcement capacities of the PPL with the  GDPR.

You can access the latest version of the report here.

What is the PPL?

Data Protection in Israel is governed primarily by PPL which covers the collection and use of personal data and sensitive data, sets the rights and obligations of the parties collecting and using the data, including security requirements with respect to it, and sets the rights afforded to individuals whose data is collected and used.

Key highlights

The PPL and the GDPR share some similarities, including:

  • both define different roles and responsibilities for the database owner/data controller as well as the database manager or possessor/data processor;
  • provide for comprehensive remunerations and damages to be paid to injured parties and in the event of civil wrongs; and
  • the right to inspection in the PPL is similar to the right of access in the GDPR; and

However, despite their similarities, the PPL and the GDPR also differ sometimes in their approach, such as:

  • the PPL provides for data subject rights after death and any related complaints;
  • unlike the GDPR, the PPL does not explicitly refer to legal bases for processing personal information;
  • the PPL does not directly address anonymized and pseudonymized data; and
  • the PPL does not distinguish between the definition of 'persons' and children.
Feedback