Per Sections 7-8 of POPL 5741-1981 + Privacy Protection (Data Security) Regulations 5777-2017 - Israel maintains a unique requirement (distinct from GDPR) of mandatory database registration with the Privacy Protection Authority (PPA) for certain categories of databases. Database (Maagar Meidah) per Section 7: a collection of data + maintained by magnetic or optical means + intended for computer processing - excludes (a) personal collection unrelated to business; (b) public access collection (where information is lawfully publicly disclosed). (1) Database Definition Document (Mismach Hagdarat Maagar) per Article 2 of Data Security Regulations: every controller (Baal Maagar) must prepare a written Database Definition Document covering (a) database name + purpose; (b) categories of data subjects + categories of personal information; (c) database security level classification (basic + medium + high); (d) information security policy; (e) authorised personnel + access matrix; (f) systems holding data; (g) data flow + sharing with third parties; (h) data retention period + destruction; (i) cross-border transfer specifics; (j) outsourcing arrangements; (k) physical and technical security measures; updated upon material changes + reviewed annually. (2) Database Registration per Section 8: mandatory registration with PPA for: (a) databases containing more than 10000 individuals data; (b) databases containing sensitive information (health + biometric + sexual orientation + religious beliefs + ethnic origin + criminal records + financial info); (c) databases of public organisations; (d) databases for direct marketing services to third parties; (e) databases where data is collected from sources other than data subject. Registration content: controller identity + database name + purposes + categories + Database Definition Document + security level + ISO Information Security Officer details. Amendment 13 March 2024 raised registration thresholds: databases with less than 100000 individuals data and not classified high or medium security level + reduced from prior thresholds in some categories + simplified registration for low-risk databases. Registration is public + searchable on PPA website (rashut.gov.il). (3) Security Level Classification per Data Security Regulations 2017: (a) Basic Security Level - small + non-sensitive databases; (b) Medium Security Level - includes 10000+ data subjects + medium-sensitivity data + access by 10+ users; (c) High Security Level - large + sensitive + critical databases including (i) more than 100000 individuals; (ii) special categories of sensitive data per Sec 7; (iii) databases requiring biometric or genetic data; (iv) public authority databases of national significance. Each level imposes graduated security obligations. Coordinates with GDPR Art 30 ROPA + DPDP ROPA + Israel Cyber Directorate guidelines + Data Security Regulations 2017 + PPA registration guidelines + GDPR Adequacy. Israel POPL Database Registration applies.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.