The Privacy Protection Regulations (Data Security) 2017 are mandatory regulations for any entity holding a database in Israel. They define security levels (basic, medium, high) and specific requirements for each level. CBE has been guiding organizations to compliance with the regulations for 30 years.
CBE specializes in guiding and certifying organizations for the Privacy Regulations standard, tailoring the management system to the organization's needs.
Quick facts – Privacy Regulations
Objective
Compliance with Israeli data security regulations
Who needs it
Any Israeli entity holding a database
Relevance in Israel
Legal obligation — fines and criminal liability
Complements
Amendment 13, ISO 27001, GDPR
CBE — success rate
100% — hundreds of certified clients
The Privacy Protection Regulations (Data Security) 2017 are mandatory regulations that define the data security requirements for any entity holding a database in Israel. They classify databases into 3 levels and define security requirements for each level.
Basic security level — simple databases. Medium security level — databases with relatively sensitive data. High security level — databases with the most sensitive data (health, finance and more).
CBE doesn't just guide you to the regulations — we build a compliance framework that combines the Privacy Regulations, Amendment 13 and ISO 27001, because full compliance requires all three.
Identifying the required security level for each database: basic/medium/high.
Managing permissions, authentication and identification by security level.
Policies, procedures and documentation required by the regulations.
Security incident procedure and reporting to the authority.
Any SaaS holding an Israeli customer database must comply with the regulations.
To sector pagePublic entities with sensitive databases — high level.
Customer, payment and purchase history databases.
Fines and criminal liability for non-compliance with the regulations
A security framework that complies with Israeli law
Proof that you protect the data you hold
Israeli regulations + GDPR = international compliance
Defining the organization's needs, stakeholders and the scope of the quality management system.
Process planning and control, managing customer requirements, external providers and output control.
Management commitment, quality policy and defining roles and responsibilities.
Measurement, analysis, internal audit and management review.
Risk and opportunity management, quality objectives and plans to achieve them.
Managing non-conformities, corrective actions and continuous improvement of the system.
Resources, employee competence, internal communication and documentation.
CBE performs a full Gap Analysis and builds a work plan tailored to your organization.
Full privacy compliance
CBE guides you at every step — from database classification to ongoing compliance
Determining the security level for each database
Gap analysis against the required level's requirements
Policies, procedures and controls by security level
Implementing controls and appointing an officer
Annual audit and regulatory updates
30 years, hundreds of clients, 100% success — here's what sets us apart
Committed to success! No client has ever failed a certification audit. Not certified — you don't pay!
We adapt the timeline to your deadline — tender, supplier, client.
CBE's skilled human team writes your procedures and documentation tailored to your organization.
Data security regulations are the foundation. CBE also guides you to Amendment 13, ISO 27001, GDPR and more.
We don't disappear after the certificate. Annual reviews, standard updates, organizational changes.
From startup to enterprise — experience with every type of organization in every field.
The regulations are the basic requirement — Amendment 13 and GDPR add additional layers.
About CBE's GRC frameworkCBE specializes in guiding and certifying organizations for the Privacy Regulations standard. The service is provided by CBE's experts, with 30 years of experience in ISO standards, over 4,000 satisfied clients and 100% success in audits.
Tell us about your databases and what's driving you — we'll come back with a compliance plan