Organizing for the implementation of the Privacy Protection Law (Databases)

We would like to inform you that recently there has been a significant development in the field of enforcement of the Privacy Protection Law
Regarding databases. 
It should be emphasized that failure to comply with the regulations under the law constitutes a criminal offense.
We will remind you that in March 2017, the Knesset approved the Privacy Protection (Information Security) Regulations, which detail the manner
The application of the information security obligation, imposed by the Privacy Protection Law, on any entity that manages or processes a database of
Personal information (the regulations entered into force in May 2018)

required according to the regulations
The regulations detail steps for managing and implementing information security, in accordance with the sensitivity of the databases and information
found in them, according to 4 levels of security that the regulations define:

• Security level for a database with a single authority
• Basic security level - Information such as full name, phone, address.
• Medium security level – 17, medical, financial information, consumption habits, political opinions, beliefs and more as defined by law.
• High level of security - Databases, including those of a public body, whose purpose is to collect information for the purpose of providing it to others or which contain sensitive information, as described above, about 100,000 people or more or the number of authorized persons to access this information exceeds 100.