Importance of the Law
The Personal Data Protection Law is a cornerstone of Jordan’s digital regulatory framework. It establishes rules for how personal data is collected, used, and stored, aiming to protect individuals’ privacy, build trust between institutions and clients, and enhance transparency in digital transactions.
Personal Data vs. Sensitive Personal Data
The law distinguishes between:
Personal data: e.g., name, address, contact information.
Sensitive personal data: e.g., health information, financial data, biometric records.
Sensitive personal data requires higher levels of protection, as unauthorized disclosure or misuse may cause significant harm to individuals.
Prior Consent
The law emphasizes that clear and specific prior consent must be obtained before collecting or processing personal data. Exceptions exist for certain legal obligations or compliance requirements, but as a principle, consent remains the foundation of lawful data processing.
Compliance Requirements
Compliance with the Personal Data Protection Law is essential for all organizations operating in Jordan. Benefits include:
- Protecting privacy and safeguarding individual rights.
- Avoiding legal liability and financial penalties for violations.
- Strengthening customer trust and building a positive institutional reputation.
- Establishing responsible data management practices to reduce risks of breaches or unauthorized use.
The law also introduces 10 key steps for compliance, providing organizations with a clear roadmap to align with legislative requirements.
Data Protection Officer (DPO)
Organizations are required to appoint a Data Protection Officer (DPO) to ensure ongoing compliance with the law. The DPO is responsible for:
- Monitoring adherence to the law and internal policies.
- Acting as a point of contact for data subjects and regulators.
- Addressing inquiries and managing incidents relating to personal data.
The Personal Data Protection Directorate continues to promote awareness, supporting organizations and individuals in understanding their rights and obligations under the law, and fostering a culture of compliance and accountability across Jordan.
Jaradat Lawyers’ Role
As one of the leading law firms in Jordan in data protection and privacy law, Jaradat Lawyers assists clients by:
- Conducting data audits and mapping flows of personal and sensitive data.
- Drafting and reviewing privacy policies, consent forms, and internal compliance frameworks.
- Advising on the appointment and responsibilities of Data Protection Officers.
- Representing clients before the Personal Data Protection Directorate in regulatory matters.
- Aligning compliance with international frameworks such as GDPR for multinational companies.
Conclusion
Jordan’s Personal Data Protection Law marks a pivotal development in regulating the digital economy. For foreign investors, technology companies, and local institutions, compliance is not only a legal obligation but also a business advantage, strengthening trust and credibility in an increasingly data-driven market.
Organizations are encouraged to act early, establish robust compliance mechanisms, and seek legal guidance to navigate the new framework effectively.