Section 8B and related provisions of POPL 5741-1981 establish purpose limitation + lawful processing principles. (1) Section 8B Use Limitations: personal information in a database may be used only for purposes for which it was collected and registered + or for compatible purposes notified to data subjects. Any use beyond the registered purpose requires (a) additional consent; (b) statutory authorisation; (c) compatible purpose extension per regulations. (2) Section 11 Notice Requirement: at time of collection + controller must inform data subject of (a) whether providing data is voluntary or required; (b) purpose for collection; (c) categories of recipients; (d) rights including access and correction. Failure to provide proper notice can void consent + invalidate lawful basis. (3) Lawful Processing Bases (similar to GDPR but distinct framing): (a) Consent - free + specific + informed - typically opt-in; (b) Performance of contract with data subject; (c) Compliance with legal obligation; (d) Vital interests of data subject; (e) Public interest performed by public authority; (f) Legitimate interests of controller with balancing test against data subject rights. Amendment 13 March 2024 further modernised these toward GDPR Art 6 equivalence. (4) Data Minimisation: implied principle requiring controllers to collect only personal data adequate + relevant + and necessary for stated purpose + not over-collect + retain only for necessary period. (5) Storage Limitation: personal data retained only for period necessary to achieve registered purpose + then destroyed or anonymised + per database retention schedule + considering statutory retention requirements + statute of limitations + business records requirements. (6) Sensitive Data Special Protections: Section 7 defines sensitive information categories requiring elevated consent and protections: (a) information on personality including political opinions or beliefs + sexual life + religious beliefs; (b) past medical condition (per amendments); (c) genetic information; (d) biometric data; (e) financial information; (f) information on minors; (g) other sensitive categories per regulations + court interpretation. (7) Children Data: enhanced protections for personal data of minors + verifiable parental consent required for processing of children data + alignment with UN Convention on Rights of the Child + Israeli Children Rights Council + Adolescents Protection Law. (8) Automated Decision-Making: emerging recognition of right to human review + per Amendment 13 + alignment with GDPR Art 22. Coordinates with GDPR Arts 5 + 6 + Council of Europe Convention 108 + 108+ + Israeli Children Rights Law + Patient Rights Law + Genetic Information Law + UN CRC. Israel POPL Purpose Limitation applies.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.