Jordan Personal Data Protection Law (Law No. 24 of 2023) 14(A): Article 14(A) and (C): transfer or exchange only with consent, a legitimate interest, informed data subjects and no marketing purpose

Data may not be transferred or exchanged between the controller and any other person, including the recipient, without the data subject's consent and unless the transfer serves legitimate interests of the controller and the recipient, the data subject has sufficient knowledge of the recipient and of the purposes for which the data will be used, and the purpose is not marketing products or services unless the data subject agrees. Competent public entities may transfer and exchange data among themselves to the extent their legal duties require (Article 14(C)).