Understanding Data Protection and Privacy Laws in Jordan

In today's digital age, data protection and privacy have become paramount concerns for individuals and organisations alike. Jordan's Personal Data Protection Law addresses these concerns by setting strict guidelines on how personal data can be processed.

Consent and Data Processing

In Jordan, personal data can only be processed if the data subject gives their explicit consent. This consent must be written in clear, unambiguous language, specifying its duration and purpose. This ensures that individuals have a clear understanding of how their data will be used and for how long.

Exceptions to Consent

While consent is critical, the law also outlines specific scenarios where data can be processed without the subject's consent:

1. Legal Authorities: Data processing is permitted if it is carried out by competent authorities in accordance with existing laws.

2. Medical and Vital Interests: If necessary for preventive medical services or to protect the life or vital interests of the data subject, data processing can proceed without consent.

3. Crime Prosecution: Data can be processed without consent if it is essential for prosecuting crimes.

4. Judicial Requests: Courts or the Jordanian Central Bank can request data processing without the subject's consent.

5. National Security and Public Interest: If necessary for national security or public interest, data can be processed without prior consent.

6. Publicly Available Data: If the data has been made publicly available by the data subject, further processing without consent is allowed.

Implications for organisations

Organisations handling personal data in Jordan must ensure that they obtain clear and specific consent from data subjects, except in the outlined exceptional circumstances. They must also be prepared to demonstrate that their data processing activities comply with these legal requirements.

Implications for individuals

Jordan's Personal Data Protection Law is designed to safeguard individuals' privacy while balancing the needs of public interest and security. By adhering to these regulations, organizations can ensure they respect personal data rights and maintain trust with their stakeholders.