Amendment 13 to the Privacy Protection Law (1981) is a substantial update to Israel's privacy law that came into force in 2023 and significantly tightens the requirements for any entity holding a database. Fines, mandatory privacy officer appointment and incident reporting — have arrived in Israel. CBE has been guiding organizations to compliance for 30 years — with 100% success and over 4,000 satisfied clients.
CBE specializes in guiding and certifying organizations for the Amendment 13 standard, tailoring the management system to the organization's needs.
Quick facts – Amendment 13
Objective
Protecting the personal data of Israeli citizens
Who needs it
Any Israeli entity holding a database
Relevance in Israel
Legal obligation — fines and criminal liability
Complements
GDPR, ISO 27001, SOC 2
CBE — success rate
100% — hundreds of certified clients
Amendment 13 is a substantial upgrade to Israel's Privacy Protection Law that significantly increased privacy enforcement. It added administrative fines (up to 3.2 million ₪), a mandatory privacy officer appointment for large entities, and a mandatory security incident reporting requirement to the Privacy Protection Authority.
Israel is recognized by the European Union as a country with adequate privacy protection (Adequacy Decision). Amendment 13 is also designed to maintain this recognition and align with GDPR standards.
CBE doesn't just guide you to Amendment 13 — we build a privacy framework that combines Amendment 13, GDPR and ISO 27001, because organizations working internationally need all of them.
Every personal data database must be registered with the Privacy Protection Authority.
Right to access, rectify, delete and object — must be enabled and documented.
Mandatory reporting to the Privacy Protection Authority and to data subjects regarding breaches.
Large entities must appoint a privacy officer and report to the authority.
Every app and digital service collecting data from Israelis must comply with Amendment 13. Including cookies and tracking.
To sector pageFinancial data is especially sensitive. Banks, insurance companies and fintech are subject to dual regulation: Amendment 13 + Bank of Israel.
To sector pageMedical data is first-tier sensitive data under Amendment 13 — stricter obligations.
To sector pageEvery store managing a customer database must register, have privacy procedures and enable access and deletion.
Any organization holding employee, candidate and customer databases — must register and comply with all requirements.
To sector pagePublic entities and local authorities hold enormous amounts of personal data — subject to Amendment 13 in full.
Administrative fines up to 3.2 million ₪ + criminal exposure for managers
Amendment 13 is a legal obligation — not an option. Non-compliance is an offense
Israel is recognized as an EU-approved country — compliance preserves this recognition
An organization that respects privacy earns higher trust in the market
Defining the organization's needs, stakeholders and the scope of the quality management system.
Process planning and control, managing customer requirements, external providers and output control.
Management commitment, quality policy and defining roles and responsibilities.
Measurement, analysis, internal audit and management review.
Risk and opportunity management, quality objectives and plans to achieve them.
Managing non-conformities, corrective actions and continuous improvement of the system.
Resources, employee competence, internal communication and documentation.
CBE performs a full Gap Analysis and builds a work plan tailored to your organization.
Amendment 13 is the Israeli foundation — here's what completes the global picture
CBE guides you at every step — from database mapping to ongoing compliance and legislative updates
Mapping all databases, data flows and risk levels
Database registration, privacy procedures, officer appointment, access processes
Privacy Awareness training, implementing controls and incident response procedures
Verifying compliance with all Amendment 13 requirements before an authority audit
Amendment 13 is continuous compliance — CBE updates you on legislative changes
30 years, hundreds of clients, 100% success — here's what sets us apart
Committed to success! No client has ever failed a certification audit. Not certified — you don't pay!
We adapt the timeline to your deadline — tender, supplier, client.
CBE's skilled human team writes your procedures and documentation tailored to your organization.
Amendment 13 is the foundation. CBE also guides you to GDPR, ISO 27001, SOC 2 and more — under one roof.
We don't disappear after the certificate. Annual reviews, standard updates, organizational changes.
From startup to enterprise — experience with every type of organization in every field.
Amendment 13 covers local privacy — but international organizations also need additional regulations. CBE manages your entire privacy journey under one roof.
About CBE's GRC frameworkCBE specializes in guiding and certifying organizations for the Amendment 13 standard. The service is provided by CBE's experts, with 30 years of experience in ISO standards, over 4,000 satisfied clients and 100% success in audits.
Tell us about your databases — we'll come back with an exposure assessment and compliance plan