🇯🇴Personal Data Protection Law No. 24 of 2023
Personal Data Protection Law No. 24 of 2023
The official Arabic Gazette scan hosted by Jordan's National Cyber Security Center is the source document used for these controls. Ministry materials confirm the 17 March 2024 effective date.
Core operational duties
Rights and consent: Articles 4-6 establish data-subject rights, valid prior-consent conditions and defined exceptions.
Processing controls: Articles 7-10 require lawful purposes, accuracy, confidentiality, safeguards, rights mechanisms and advance information about processing.
Lifecycle and incidents: Articles 11-12 cover erasure or anonymisation and response to security and integrity breaches.
Governance and transfers: Articles 13-17 address processors, officer appointment, records and transfers outside the Kingdom.
The Ministry's current legislation library separately identifies final 2025 disclosure, security, council, register and DPO materials. Their requirements should be checked for each relevant implementation.