Is Your Business Exposed to Fines?
Amit, the owner of a successful online store in Tel Aviv, recently heard about Amendment 13 to the Privacy Protection Law. He didn’t think it applied to small businesses like his until he heard about fines reaching ten thousand shekels per customer. This caused him deep concern.
Amit discovered he had no privacy protection officer and hadn't updated his privacy policy in a long time. He quickly realized the financial risk was enormous and that he needed to act now to avoid legal problems.

What Do Courts Really Look At?
The law focuses on several key points: whether you have a privacy protection officer, whether you allow customers to review the information collected about them, and whether your privacy policy is updated and reflects the use of information.
Additionally, it's important to understand that any information collection, even details like email or name, must be done according to a clear policy and with customer consent. Using information for purposes the customer has not approved can lead to heavy fines.
The law not only addresses information collection but also how you protect that information. Do you have adequate security measures in place?
When Is It Relevant — Checklist
- ✓You don't have an updated privacy policy
- ✓You don't have a privacy protection officer
- ✓You haven't allowed customers to review information
- ✓You've used information for purposes the customer didn't approve
The Specific Law That Applies
Amendment 13 to the Privacy Protection Law requires businesses to appoint a privacy protection officer and ensure their privacy policy is updated. This also includes the obligation to inform customers about data collection and allow them to review it.

Questions Everyone Asks — And No One Asks the Lawyer
Real Situations — Which Side of the Line Are You On?
- Online store manager not informed about the law amendment. Potential fine of hundreds of thousands of shekels.
- Small business owner not allowing customers to review information. Sued by a customer.
- Marketer collecting information without customer consent. High legal exposure.
What to Do Right Now
First step: Check your privacy policy. If you don't have one, now is the time to draft one.
If you don’t act, you could face lawsuits and heavy fines. Consult with a lawyer to ensure your business complies with the law.
