Protection of Privacy Law, ss. 3 and 8(b): processing personal data only for the purpose the database was lawfully set up for (Protection of Privacy Law, 5741-1981 (as amended by Amendment 13), ss. 3 and 8(b), unofficial translation)
Handing records to a buyer is 'processing', which the law defines to include disclosure, transfer and granting access. A holder may process the personal data in its support, email, CRM and similar databases only for the purpose that database was lawfully established for, so licensing it for AI training is a new purpose that needs a basis (in practice the data subject's informed consent, see the Authority's AI guidance). The text is the Ministry of Justice's unofficial English translation, headed 'Updated After Amendment 13'; only the Hebrew text binds.
Dated 18 Oct 2026Source checked 18 Oct 2026Basis: primary text
In the source's own words
“any action performed on personal data, including its receipt, collection, storage, copy, review, disclosure, exposure, transfer, provision, or granting access to it; ... No person shall process personal data in a database except for the lawfully established purpose of the database.”
Where it was read
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in these 2 guides