Since March 2025
Personal Data Protection Law No. 24 of 2023
Applies to every organisation in Jordan handling personal data — customer records, payroll files, accounting systems.
- Requires
- Documented consent, records of processing, and a Data Protection Officer for many organisations
- Breach
- 24 hours to notify affected individuals, 72 hours to notify the regulator
- Penalties
- JOD 1,000 – 10,000 per violation, plus daily fines up to JOD 500