Privacy Protection (Transfer of Data to Databases Abroad) Regulations: adequacy rule, the consent and agreement routes, written guarantee (Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 5761-2001, regs. 1, 2(1), 2(4) and 3, unofficial translation)
Israeli personal data may go abroad only if the receiving country's law gives protection no lesser than Israel's, or if one of the listed conditions is met. For a licence to a US buyer the usable routes are the data subject's consent (reg. 2(1)) or an agreement binding the buyer to the standards that apply to a database in Israel (reg. 2(4)), and in both cases the holder must get the buyer's written guarantee of adequate privacy measures and of no onward transfer (reg. 3). I found no list in the text that names the United States. The text is the unofficial English translation on gov.il; only the Hebrew binds.
Dated 18 Oct 2026Source checked 18 Oct 2026Basis: primary text
“A person shall not transfer, nor shall he enable, the transfer abroad of data from databases in Israel, unless the law of the country to which the data is transferred ensures a level of protection no lesser, mutatis mutandis, than the level of protection of data provided for by Israeli Law ... (1) The data subject has consented to the transfer; ... (4) The data is transferred to a person bound by an agreement with the owner of the database from which the data is transferred, to comply with the conditions for ... the ownership and use of the data applying to a database in Israel, mutatis mutandis; ... the owner of the database shall ensure, in a written guarantee by the recipient of the data, that recipient of the data is taking adequate measures to ensure the privacy of the data subjects, and that he guarantees that the data shall be transferred to no other person, whether in that country or in another.”
It is shown on its own, not counted into a figure.
Cited in these 2 guides