Israel Protection of Privacy Law (5741-1981) 8(c): Section 8(c): no processing without or beyond the controller's authorisation

What does 8(c) require?

No person may process information from a database without the controller's authorisation or beyond its scope; doing so is also an offence carrying three years' imprisonment (section 23NE).

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Law, Chapter B Part A: databases, registration, notice, rights, confidentiality, security and officers – Israel Protection of Privacy Law (5741-1981)

11 Section 11: notice when collecting personal information
13 Section 13: right of access to personal information
13A Section 13A: access where a holder keeps the information
14 Section 14: correction or erasure of incorrect information
16 Section 16: confidentiality of employees, managers and holders
17 Section 17: controller and holder each responsible for data security
17B Section 17B: appoint a Data Security Officer where required
17B1 Section 17B1: appoint a Data Protection Officer where required

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Israel Protection of Privacy Law (5741-1981) controls