The Jordanian Personal Data Protection Law No. 24 of 2023 (PDPL) has been officially ratified and will come into force on March 17, 2024, six months after its publication in the official gazette on September 17, 2023. This landmark legislation, consisting of 25 articles, is the first of its kind in Jordan, aimed at safeguarding personal data in the Kingdom.

In response to the growing reliance on technology and the rise of personal data collection, especially with the advent of artificial intelligence, the PDPL establishes a balanced framework. It allows public and private entities to collect personal data for their activities while ensuring citizens' rights to privacy are protected.

The law defines Personal Data as any information identifying an individual, directly or indirectly, and Sensitive Personal Data as information related to origin, race, opinions, religious beliefs, health status, or biometric data, among others. The PDPL sets guidelines for data processing, requiring individuals’ prior consent (with certain exceptions) and ensuring data is processed for clear, legal, and legitimate purposes.

Key provisions include:

• Articles 4–7 outline conditions for obtaining approval for data processing and the legitimate handling of personal data.
• Articles 16–17 establish a Personal Data Protection Council responsible for enforcing data protection standards and issuing licences for data storage and processing.
• Articles 21–22 specify penalties for violations, including licence revocation or fines for non-compliance.

This new law marks a significant step in modernizing Jordan’s data protection landscape and ensuring the safety and privacy of personal information.