Lebanon Electronic Transactions and Personal Data Protection Law (Law No. 81/2018)
Lebanon's Law No. 81 of 10 October 2018 on Electronic Transactions and Personal Data, the country's only general data protection statute and its electronic commerce law: electronic records and signatures, certification providers, e-commerce disclosures and spam, electronic banking and cards, IT service provider duties including three-year traffic data retention, and Part V on personal data (fair and specified collection, notice, retention as declared, a ban on health, genetic and sexual life data save four cases, security, a declaration to the Ministry of Economy and Trade or a ministerial licence, access and correction within ten days) enforced through criminal fines and the courts. Built from the official Arabic text.
Lebanon Electronic Transactions and Personal Data Protection Law (Law No. 81/2018) is a compliance framework from Lebanon with 6 domains and 47 controls that map to 6 other frameworks. The largest domains are Part V: personal data protection (Articles 85 to 109) – Lebanon Electronic Transactions and Personal Data Protection Law (Law No. 81/2018) (17 controls), Part II, Chapter III: electronic banking, payments and bank cards (Articles 41 to 64) – Lebanon Electronic Transactions and Personal Data Protection Law (Law No. 81/2018) (12 controls), Part I: electronic writing, evidence and authentication services (Articles 1 to 29) – Lebanon Electronic Transactions and Personal Data Protection Law (Law No. 81/2018) (6 controls). Every control below carries what it requires and what an assessor expects to see.
Framework summaries on this platform are interpretations grounded in the published source, for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (6)
Part I: electronic writing, evidence and authentication services (Articles 1 to 29) – Lebanon Electronic Transactions and Personal Data Protection Law (Law No. 81/2018)
| Code | Title |
|---|---|
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::19 | Article 19: certification service providers keep professional secrecy over the data they certify |
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::22 | Article 22: accreditation criteria for certification service providers |
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::26 | Article 26: accredited providers notify COLIBAC of changes |
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::27 | Article 27: accredited providers give a copy of their accreditation certificate on request |
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::4-7 | Articles 4, 5 and 7: electronic writings and documents carry evidential weight when the author is identifiable and integrity is preserved |
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::9 | Article 9: electronic signatures are produced by a secure means that identifies the signatory |
Part II, Chapter III: electronic banking, payments and bank cards (Articles 41 to 64) – Lebanon Electronic Transactions and Personal Data Protection Law (Law No. 81/2018)
| Code | Title |
|---|---|
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::43 | Article 43: prior written client consent to clear electronic payment terms with all fees |
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::44 | Article 44: 30 days' written notice of changes; emergency restrictions communicated at once |
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::45 | Article 45: systems that store orders, identify the originator and report acceptance or rejection |
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::47 | Articles 46 and 47: investigating reported unauthorised or unexecuted transactions and making the client whole |
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::48 | Article 48: payment and transfer orders are given in writing and signed |
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::49 | Article 49: revocation of orders and periodic orders |
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::50 | Article 50: liability for non-execution or partial execution and refund |
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::51 | Article 51: no deduction of fees from the transferred amount without explicit notice and written approval |
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::52 | Article 52: periodic written statements |
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::53 | Article 53: written card applications and no unsolicited activated cards |
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::54 | Article 54: card issuer duties on identification data, records, loss reporting, blocking and transaction alerts |
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::57 | Articles 56 to 59: loss, theft and fraud: blocking, one-month refund and issuer liability |
Part II: electronic commerce and electronic contracts (Articles 30 to 40 bis) – Lebanon Electronic Transactions and Personal Data Protection Law (Law No. 81/2018)
| Code | Title |
|---|---|
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::31 | Article 31: e-commerce businesses give easy, direct and permanent access to their identification details |
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::32(1) | Article 32, first paragraph: online advertising is identified as advertising |
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::32(2) | Article 32, second and third paragraphs: unsolicited marketing needs prior consent and every message carries a free opt-out address |
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::33 | Article 33: electronic offers state the contracting steps, savable terms, error correction, record keeping and language |
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::35 | Article 35: the offeror acknowledges receipt of the acceptance |
Part V: personal data protection (Articles 85 to 109) – Lebanon Electronic Transactions and Personal Data Protection Law (Law No. 81/2018)
| Code | Title |
|---|---|
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::100 | Article 100: access fee capped at the cost of copying; abusive requests |
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::101 | Article 101: correction, completion, updating and erasure within ten days, free of charge, with notice to recipients |
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::104 | Article 104: public records, medical files and public bodies' processing outside their own legal texts |
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::86 | Article 86: review of and objection to automated processing |
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::87(1) | Article 87, first paragraph: fair collection for legitimate, specific and explicit purposes |
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::87(2) | Article 87, second paragraph: adequate, not excessive, accurate, complete and kept up to date |
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::87(3) | Article 87, third paragraph: no later processing for incompatible purposes |
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::88 | Article 88: information given to the people from whom data are collected |
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::89 | Article 89: informing data subjects when data are obtained from someone else |
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::90 | Article 90: retention only for the period stated in the declaration or licence |
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::91 | Article 91: health, genetic and sexual life data are not collected or processed save in four cases |
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::92 | Article 92: the right to object, including to commercial promotion |
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::93 | Article 93: security and integrity of personal data |
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::95 | Article 95: declaration to the Ministry of Economy and Trade before processing |
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::96 | Article 96: contents of the declaration |
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::97 | Article 97: licence for processing about state security, offences and proceedings, and health, genetic or sexual life data |
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::99 | Article 99: the right of access, a copy in intelligible form, and further information |
Parts III and IV: IT service providers and domain names (Articles 65 to 84) – Lebanon Electronic Transactions and Personal Data Protection Law (Law No. 81/2018)
| Code | Title |
|---|---|
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::69 | Article 69: network service providers remove or disable transiently stored information on request or court order |
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::70 | Article 70: data hosts remove manifestly unlawful content once they actually know of it |
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::72 | Article 72: IT service providers retain traffic and identification data for three years and keep it confidential |
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::73 | Article 73: IT service contracts define the service level, type and continuity |
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::74 | Article 74: professional publishers identify themselves; data hosts keep anonymous publishers' identity for ten years |
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::76 | Article 76: IT service providers cooperate with the courts and give traffic data and real-time access on a judicial decision |
Parts VI to VIII: offences, IT evidence, consumer protection amendments and final provisions (Articles 110 to 136) – Lebanon Electronic Transactions and Personal Data Protection Law (Law No. 81/2018)
| Code | Title |
|---|---|
| lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::129 | Article 129 (Consumer Protection Law, Article 55 as replaced): the ten-day right to withdraw from distance and electronic contracts |
Your Compliance Coverage
If you comply with Lebanon Electronic Transactions and Personal Data Protection Law (Law No. 81/2018), you already cover:
USMCA Chapter 19 - Digital Trade (United States-Mexico-Canada Agreement)
2%
1 controls mapped
Compare →SQF Code Edition 9 - Safe Quality Food
2%
1 controls mapped
Compare →US Consumer Product Safety Act (CPSC) Manufacturer and Importer Duties
2%
1 controls mapped
Compare →+ 3 more: AS9100D - Aerospace Quality Management System (2%), ISO 26000:2010 (2%)
See all 6 mapped frameworks ↓Maps to 6 other frameworks
Coverage is not the same as your position
This page shows what Lebanon Electronic Transactions and Personal Data Protection Law (Law No. 81/2018) overlaps with in general. Where your organisation actually stands, against the standard you are going for and the certifications you already hold, is a different question. Same graph and the same recorded refutations, scoped to you rather than to a pair.
The Compliance Position Diagnostic, $5,000 fixed, ten business daysWhat is Lebanon Electronic Transactions and Personal Data Protection Law (Law No. 81/2018) and who does it apply to?
Lebanon Electronic Transactions and Personal Data Protection Law (Law No. 81/2018) is a compliance framework from Lebanon with 6 domains and 47 controls. Lebanon's Law No. 81 of 10 October 2018 on Electronic Transactions and Personal Data, the country's only general data protection statute and its electronic commerce law: electronic records and signatures, certification providers, e-commerce disclosures and spam, electronic banking and cards, IT service provider duties including three-year traffic data retention, and Part V on personal data (fair and specified collection, notice, retention as declared, a ban on health, genetic and sexual life data save four cases, security, a declaration to the Ministry of Economy and Trade or a ministerial licence, access and correction within ten days) enforced through criminal fines and the courts. Built from the official Arabic text. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
What does Lebanon Electronic Transactions and Personal Data Protection Law (Law No. 81/2018) actually require?
Lebanon Electronic Transactions and Personal Data Protection Law (Law No. 81/2018) has 47 controls organised across 6 domains. The largest domains are Part V: personal data protection (Articles 85 to 109) – Lebanon Electronic Transactions and Personal Data Protection Law (Law No. 81/2018) (17 controls), Part II, Chapter III: electronic banking, payments and bank cards (Articles 41 to 64) – Lebanon Electronic Transactions and Personal Data Protection Law (Law No. 81/2018) (12 controls), Part I: electronic writing, evidence and authentication services (Articles 1 to 29) – Lebanon Electronic Transactions and Personal Data Protection Law (Law No. 81/2018) (6 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
If I already comply with another framework, how much of Lebanon Electronic Transactions and Personal Data Protection Law (Law No. 81/2018) do I already cover?
Lebanon Electronic Transactions and Personal Data Protection Law (Law No. 81/2018) maps to 6 other compliance frameworks. The top mapping partners are USMCA Chapter 19 - Digital Trade (United States-Mexico-Canada Agreement) (2% coverage), SQF Code Edition 9 - Safe Quality Food (2% coverage), US Consumer Product Safety Act (CPSC) Manufacturer and Importer Duties (2% coverage). Use our comparison tool to explore control-level mappings between frameworks.
How do I implement Lebanon Electronic Transactions and Personal Data Protection Law (Law No. 81/2018)?
Start your Lebanon Electronic Transactions and Personal Data Protection Law (Law No. 81/2018) compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about Lebanon Electronic Transactions and Personal Data Protection Law (Law No. 81/2018) requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 47 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 1,067 frameworks.
Get Started Free →Free forever, no credit card required