Back to Frameworks

Jordan Draft Personal Data Protection Law (2022)

Jordan
v2015/2023 (comprehensive law pending)
8 domains
8 controls

Jordan has been developing comprehensive personal data protection legislation. The Draft Personal Data Protection Law (2022 version under consideration) proposes GDPR-aligned data protection requirements. Currently, data protection is addressed through the Jordanian Constitution (privacy rights), the Cybercrime Law (No. 17/2023), the Telecommunications Law, and sector-specific regulations. The Electronic Transactions Law (No. 15/2015) addresses electronic data security. The Jordan Telecommunications Regulatory Commission (TRC) oversees telecommunications data privacy.

Verified

Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (8)

JO PDPL Breach Notification

1 controls
Controls in the JO PDPL Breach Notification domain of Jordan Draft Personal Data Protection Law (2022)1 controls
CodeTitle
JO-PDPL-Breach-Notification-Article19-Council-72Hour-High-Risk-Data-Subjects-MitigationJordan PDPL Personal Data Breach Notification + Article 19 + Council Notification + 72-Hour SLA + High-Risk Affected Data Subjects + Mitigation + Documentation + Processor Notification Chain

JO PDPL Council + MoDEE

1 controls
Controls in the JO PDPL Council + MoDEE domain of Jordan Draft Personal Data Protection Law (2022)1 controls
CodeTitle
JO-PDPL-Personal-Data-Protection-Council-Article4-5-6-Establishment-MoDEE-Functions-Powers-InvestigationJordan PDPL Personal Data Protection Council + Articles 4-5-6 + Establishment + Ministry of Digital Economy and Entrepreneurship (MoDEE) + Functions + Powers + Investigation + Administrative Penalties + Council Composition + International Cooperation

JO PDPL Cross-Border + Council Approval

1 controls
Controls in the JO PDPL Cross-Border + Council Approval domain of Jordan Draft Personal Data Protection Law (2022)1 controls
CodeTitle
JO-PDPL-Cross-Border-Transfer-Article20-21-Adequacy-Consent-Public-Interest-Performance-Council-ApprovalJordan PDPL Cross-Border Transfer + Articles 20-21 + Adequacy + Consent + Public Interest + Performance + Council Approval + Standard Contractual Clauses + Binding Corporate Rules + Derogations + GCC Coordination

JO PDPL Data Subject Rights

1 controls
Controls in the JO PDPL Data Subject Rights domain of Jordan Draft Personal Data Protection Law (2022)1 controls
CodeTitle
JO-PDPL-Data-Subject-Rights-Article16-17-18-19-Information-Access-Correction-Erasure-Object-PortabilityJordan PDPL Data Subject Rights + Articles 16-19 + Right to Information + Access + Correction + Erasure + Restriction + Object + Portability + Automated Decision + 30-Day Response Timeline + Free for First Request + Refusal Grounds Limited

JO PDPL Scope + Application

1 controls
Controls in the JO PDPL Scope + Application domain of Jordan Draft Personal Data Protection Law (2022)1 controls
CodeTitle
JO-PDPL-Scope-Application-Article2-3-Personal-Data-Definition-Hashemite-Kingdom-MoDEE-Council-No24-2023-17March2024Jordan Personal Data Protection Law (PDPL) No. 24 of 2023 - Scope + Application + Articles 2-3 + Personal Data Definition + Hashemite Kingdom + Ministry of Digital Economy and Entrepreneurship (MoDEE) + Personal Data Protection Council + Effective 17 March 2024 + 6-Month Transition Expired 17 September 2024

JO PDPL Sensitive Data + Children

1 controls
Controls in the JO PDPL Sensitive Data + Children domain of Jordan Draft Personal Data Protection Law (2022)1 controls
CodeTitle
JO-PDPL-Sensitive-Data-Children-Article6-Article8-Health-Genetic-Biometric-Religious-PoliticalJordan PDPL Sensitive Data + Article 6 + Article 8 + Children's Data + Health + Genetic + Biometric + Racial + Religious + Political + Trade Union + Sexual Orientation + Criminal + Enhanced Protections + Age 16 Parental Consent

JO PDPL Standard 1 - Lawful Basis

1 controls
Controls in the JO PDPL Standard 1 - Lawful Basis domain of Jordan Draft Personal Data Protection Law (2022)1 controls
CodeTitle
JO-PDPL-Standard1-Lawful-Basis-Article7-Consent-Contract-Legal-Vital-Public-Interest-LegitimateJordan PDPL Standard 1 - Lawful Basis + Article 7 + Consent + Contract Performance + Legal Obligation + Vital Interests + Public Interest + Legitimate Interests + Privacy Notice + Special Conditions for Sensitive Data

JO PDPL Training + Penalties

1 controls
Controls in the JO PDPL Training + Penalties domain of Jordan Draft Personal Data Protection Law (2022)1 controls
CodeTitle
JO-PDPL-Training-Awareness-Penalties-Article22-23-24-Compensation-Administrative-Criminal-100K-200K-JODJordan PDPL Training + Awareness + Penalties + Articles 22-23-24 + Compensation + Administrative Penalties JOD 100K + JOD 200K Repeat + Criminal 3 Years + Civil Compensation + Director Liability + Reasonable Care Defence

Your Compliance Coverage

If you comply with Jordan Draft Personal Data Protection Law (2022), you already cover:

Maps to 55 other frameworks

8 total controls
Azure Security Benchmark
2 source controls mapped|3 target controls covered
25%
Ley Orgánica de Protección de Datos Personales (LOPDP)
2 source controls mapped|1 target controls covered
25%
Law on Personal Data Protection (Official Gazette No. 42/2020)
2 source controls mapped|1 target controls covered
25%
Law No. 172-13 on the Protection of Personal Data
2 source controls mapped|1 target controls covered
25%
Saudi PDPL
2 source controls mapped|3 target controls covered
25%
ISO/IEC 27400:2022
2 source controls mapped|2 target controls covered
25%
Privacy Act 1988 (Australia)
2 source controls mapped|2 target controls covered
25%
ISO 13485
2 source controls mapped|3 target controls covered
25%
Rwanda Law No. 058/2021 Relating to the Protection of Personal Data
2 source controls mapped|2 target controls covered
25%
Senegal Law on Personal Data Protection (Law No. 2008-12)
2 source controls mapped|2 target controls covered
25%
Russia Federal Law on Personal Data (152-FZ)
2 source controls mapped|1 target controls covered
25%
ISO 27799
2 source controls mapped|3 target controls covered
25%
ISO/IEC 27011:2024
2 source controls mapped|3 target controls covered
25%
ISO 27018
2 source controls mapped|3 target controls covered
25%
Singapore Government Instruction Manual on ICT&SS Management (IM8)
2 source controls mapped|2 target controls covered
25%
Azerbaijan Law on Personal Data (2010)
2 source controls mapped|2 target controls covered
25%
Serbia Law on Personal Data Protection (2018)
2 source controls mapped|2 target controls covered
25%
Portugal Law No. 58/2019 - Data Protection Implementation Act
2 source controls mapped|2 target controls covered
25%
AWS Well-Architected Security Pillar
2 source controls mapped|3 target controls covered
25%
Pakistan Personal Data Protection Bill 2023
2 source controls mapped|2 target controls covered
25%
Barbados Data Protection Act 2019
2 source controls mapped|2 target controls covered
25%
25%
APPI
2 source controls mapped|2 target controls covered
25%
ISO 26000:2010
2 source controls mapped|1 target controls covered
25%
Switzerland FADP
2 source controls mapped|2 target controls covered
25%
Vermont Artificial Intelligence and Consumer Data Act (AICDA)
2 source controls mapped|3 target controls covered
25%
TISAX - Trusted Information Security Assessment Exchange
2 source controls mapped|1 target controls covered
25%
Telecommunications Sector Security Reforms (TSSR)
2 source controls mapped|1 target controls covered
25%
Protective Security Policy Framework (PSPF) Release 2024
2 source controls mapped|1 target controls covered
25%
Austria Data Protection Act (Datenschutzgesetz, DSG, amended 2018)
2 source controls mapped|3 target controls covered
25%
Switzerland New Federal Act on Data Protection (nFADP/nDSG, 2023)
2 source controls mapped|3 target controls covered
25%
Vietnam Law on Cybersecurity (No. 24/2018/QH14)
2 source controls mapped|1 target controls covered
25%
ISO 27017
2 source controls mapped|3 target controls covered
25%
Tunisia Organic Law on Personal Data Protection (Law No. 2004-63)
2 source controls mapped|3 target controls covered
25%
ISO 27001:2022
2 source controls mapped|1 target controls covered
25%
Bahrain PDPL
2 source controls mapped|2 target controls covered
25%
Regulation (EU) 2019/1239 on the Maritime Single Window (MSW)
2 source controls mapped|1 target controls covered
25%
ISO/IEC 23894:2023
2 source controls mapped|1 target controls covered
25%
UK Defence Standard 05-138 - Cyber Security for Defence Suppliers
2 source controls mapped|2 target controls covered
25%
GDPR
2 source controls mapped|3 target controls covered
25%
Panama Law on Personal Data Protection (Law No. 81 of 2019)
2 source controls mapped|2 target controls covered
25%
Uzbekistan Law on Personal Data (No. ZRU-547)
2 source controls mapped|1 target controls covered
25%
Peru Personal Data Protection Law (Law No. 29733)
2 source controls mapped|1 target controls covered
25%
Uruguay Personal Data Protection Act (Law No. 18.331)
2 source controls mapped|1 target controls covered
25%
Qatar Personal Data Privacy Protection Law (Law No. 13 of 2016)
2 source controls mapped|1 target controls covered
25%
Japan AI Guidelines
2 source controls mapped|1 target controls covered
25%
FTC GLBA Safeguards Rule (16 CFR Part 314)
2 source controls mapped|1 target controls covered
25%
Florida Digital Bill of Rights (FDBR)
2 source controls mapped|1 target controls covered
25%
25%
Spain Organic Law 3/2018 on Data Protection and Digital Rights (LOPDGDD)
2 source controls mapped|1 target controls covered
25%
ASD Strategies to Mitigate Cyber Security Incidents
2 source controls mapped|1 target controls covered
25%
US Consumer Product Safety Commission (CPSC) - Connected Product Safety
2 source controls mapped|1 target controls covered
25%
CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0
2 source controls mapped|1 target controls covered
25%

Frequently Asked Questions

What is Jordan Draft Personal Data Protection Law (2022)?

Jordan Draft Personal Data Protection Law (2022) is a compliance framework from Jordan with 8 domains and 8 controls. Jordan has been developing comprehensive personal data protection legislation. The Draft Personal Data Protection Law (2022 version under consideration) proposes GDPR-aligned data protection requirements. Currently, data protection is addressed through the Jordanian Constitution (privacy rights), the Cybercrime Law (No. 17/2023), the Telecommunications Law, and sector-specific regulations. The Electronic Transactions Law (No. 15/2015) addresses electronic data security. The Jordan Telecommunications Regulatory Commission (TRC) oversees telecommunications data privacy. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.

How many controls does Jordan Draft Personal Data Protection Law (2022) have?

Jordan Draft Personal Data Protection Law (2022) has 8 controls organised across 8 domains. The largest domains are JO PDPL Breach Notification (1 controls), JO PDPL Council + MoDEE (1 controls), JO PDPL Cross-Border + Council Approval (1 controls). Each control defines specific requirements that organisations must implement to achieve compliance.

What frameworks does Jordan Draft Personal Data Protection Law (2022) map to?

Jordan Draft Personal Data Protection Law (2022) maps to 55 other compliance frameworks. The top mapping partners are Azure Security Benchmark (25% coverage), Ley Orgánica de Protección de Datos Personales (LOPDP) (25% coverage), Law on Personal Data Protection (Official Gazette No. 42/2020) (25% coverage). Use our comparison tool to explore control-level mappings between frameworks.

How do I get started with Jordan Draft Personal Data Protection Law (2022) compliance?

Start your Jordan Draft Personal Data Protection Law (2022) compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about Jordan Draft Personal Data Protection Law (2022) requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 8 controls and track your progress.

Start Your Compliance Journey

Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 701 frameworks.

Get Started Free →

Free forever — no credit card required