Jordan: Opened consultation on Personal Data Protection Law No. 24 of 2023

On 25 March 2024, the Ministry of Digital Economy and Leadership in Jordan opened a public consultation on the draft Personal Data Protection Law No. 24 of 2023 until 8 April 2024. The draft establishes circumstances under which data processing can occur without obtaining explicit consent from the individuals concerned. This includes situations where processing is necessary for the legitimate interests of the data controller and when it's impractical or involves disproportionate effort to communicate with the data subject. However, certain conditions must be met for lawful processing based on legitimate interests. These conditions include ensuring that the purpose of processing complies with existing laws, respecting the rights and interests of the data subject, avoiding processing sensitive personal data, and ensuring that processing aligns with the reasonable expectations of the data subject. The draft stipulates the right to object to processing, particularly in the context of direct marketing activities. It also proposes clear and non-coercive communication about the right to unsubscribe from marketing channels. Lastly, prior to commencing processing based on legitimate interests, the data controller would be required to conduct a comprehensive risk assessment. This assessment involves identifying the purpose of processing, evaluating its necessity and potential impact on the rights and interests of individuals, and ensuring compliance with legal requirements.