Israel Protection of Privacy Law (5741-1981) DSR-2(b)-(c): Data Security Regulations reg. 2(b)-(c): update the definitions document; annual review of excess data

What does DSR-2(b)-(c) require?

The controller updates the definitions document after any significant change and assesses by 31 December each year whether technological changes or security incidents require an update, and reviews annually whether the data held exceeds what the database's purposes require.