Short, practical notes on Amendment 13, GDPR, and what they mean day-to-day for Israeli technology companies.
For 40 years almost every Israeli company had to register its database with the government. Amendment 13 ended that for most businesses — but added a 30-day notification trap most startups miss.
Israel's Privacy Protection Authority has clarified what "mutatis mutandis" means under Regulation 2(4). Here is exactly what your cross-border data transfer contract must include.
Alongside Amendment 13, the Privacy Protection Authority published a dedicated Disclosure Opinion on appointing a DPO. It answers questions the law itself leaves open — including the CISO question, outsourcing, and conflicts of interest.
The Privacy Protection Authority published its own worked examples of monetary sanctions under Amendment 13. The numbers are bigger than most companies expect — here is how they compute, with the formulas and three real scenarios.
A full-time DPO costs 400–700k NIS a year and takes months to recruit. For most companies at Seed through Series B, that is the wrong answer. Here is the short framework we use with founders.
Israel's most significant privacy overhaul in over 40 years entered into force on 14 August 2025. Here is what it practically means for your company in the first 90 days.