← Global Privacy Laws Research Library
Law No. 24 of 2023
Jordan Personal Data Protection Law No. 24 of 2023
Prepared by Shubhank Suman · Last reviewed
Enacted text; Gazette publication-based effective date not established by supplied copy
- Legal character
- National statute
- Region
- Middle East
What it covers
Personal and sensitive data, prior consent and lawful exceptions, rights including objections to unnecessary or discriminatory profiling, processing standards, transparency, erasure, officers, confidentiality, data exchange, foreign transfers and institutional enforcement.
Why it matters
Consent conditions are in article 5, exceptions in article 6 and pre-processing information in article 9; these provisions must not be conflated. Profiling rights make this privacy law relevant to AI without classifying it as an AI Act.
Refer to it when
Research Jordanian consent, profiling, subject rights, controller/processor safeguards, officer appointments or foreign transfers.
AI, privacy and cybersecurity relevance
- AI: High
- Privacy: Very High
- Cyber: High
AI
HIGH
Profiling transparency and objections to unnecessary, excessive or discriminatory profiling.
Privacy
VERY HIGH
Consent, rights, transfers and accountability.
Cybersecurity
HIGH
Security, confidentiality and breach-related oversight.
Applicability
Personal-data processing within article 3, subject to the personal-purpose exclusion and article 6 grounds; specific sensitive-data and officer requirements must be assessed separately.
Read first
Articles 2-3 → 4-7 → 8-13 → 14-15 → 16 onward.
Provisions / sections covered
Articles 1-3 - Definitions and scope
Six-month publication-based entry into force; personal/sensitive data and processing definitions; personal-purpose processing exclusion.
Articles 4-7 - Rights and processing grounds
Article 4 rights, article 5 explicit documented consent conditions, article 6 permitted processing without prior consent, article 7 purpose, accuracy, confidentiality and other requirements.
Articles 8-13 - Operational duties
Controller safeguards, article 9 advance information including profiling, article 10 erasure/concealment subject to exceptions, article 11 specified officer appointments and confidentiality duties.
Articles 14-15 - Exchange and foreign transfers
Purpose, notice and protection conditions for exchange; foreign transfers require adequate protection or specified exceptions, with destination protection checked before transfer.
Articles 16 onward - Council, Unit and enforcement
Council and Unit powers, notifications/complaints, monitoring and enforcement; regulations and instructions provide additional operational detail.
Subject-matter tags
- Consent
- Sensitive data
- Erasure and deletion
- Profiling
- Data protection officer
- Controller and processor
- Enforcement and penalties
- Surveillance
- Transparency
- Accountability
Subject-matter tags describe what the indexed text discusses. They are not legal conclusions.
Related instruments in this library
- Oman Personal Data Protection Law - Royal Decree 6/2022Decree · Status not verifiedComparative personal-data framework only; not governing law in this jurisdiction.
- Federal Decree-Law No. 45 of 2021: UAE Personal Data Protection LawDecree-Law · CurrentComparative personal-data framework only; not governing law in this jurisdiction.
Document page in the Knowledge Base - full text or PDF where it is available for this record.
This library locates primary and official sources. It does not interpret the law and it is not legal advice.