Lebanon Introduces Data Protection Legislation Amid Regional Delays

A Significant Step Forward in Protecting Personal Data

Beirut - In a significant move towards protecting its citizens’ personal data, Lebanon has passed Law No. 81 of 2018 on Electronic Transaction and Personal Data. The law, which came into effect last year, provides Lebanese citizens with essential protections for their personal data, despite some provisions not being consistent with major international privacy legislation.

Key Provisions of the Law

Definition of a Data Controller: A natural or legal person who determines the purposes and means of processing personal data.
Personal Data Definition: Any information related to an individual that enables their identification, directly or indirectly.
Principles for Data Controllers: Purpose limitation, lawful processing, accuracy, proportionality, storage limitation, security, and confidentiality.

Rights of Lebanese Citizens

Lebanese citizens have the following rights under the law:

Right to be informed about data collection and processing
Right to access their personal data
Right to rectification of inaccurate or incomplete data
Right to object to or opt-out of data processing
Right to seek legal recourse in case of data privacy violations

Limitations and Penalties

Some provisions of the law are not consistent with major international privacy legislation, such as the EU’s GDPR. However, Article 106 of the Law provides for fines ranging from LBP 1 million ($642) to LBP 3 million ($1,917) and/or imprisonment of three months to three years for non-compliance.

Industry Expert Reaction

“The passage of Lebanon’s data protection legislation is long overdue,” said an industry expert. “The country has finally recognized the importance of protecting its citizens’ personal data, and this law sets a precedent for other countries in the region to follow.”

With comprehensive data protection laws few and far between in the Middle East, the passage of Law No. 81 of 2018 highlights Lebanon’s commitment to protecting its citizens’ rights and providing them with an avenue for recourse should their data privacy rights be violated.

Future Developments

As the digital landscape continues to evolve, it is likely that Lebanon will continue to strengthen its data protection legislation to ensure its citizens’ personal data remains safe and secure.