Here’s the rewritten article in Markdown format:

Lebanon’s Shoddy Data Protection Law: A Recipe for Disaster

A Flawed Framework

In a shocking display of negligence, Lebanon has passed a data protection law that fails to safeguard the personal information of its citizens and residents. The law, which focuses on e-commerce and website registration, is woefully inadequate in protecting sensitive data from exploitation.

• Lack of clear definitions: The law does not require companies to have a fixed goal or proportionate purpose for collecting data, nor does it define what constitutes legitimate purposes.
• Ambiguity leaves citizens vulnerable: This ambiguity leaves citizens vulnerable to having their data exploited by corporations seeking to profit from their sensitive information.

A Recipe for Disaster

The consequences of this shoddy law are dire. With the increasing amount of personal data being collected by the Lebanese government, including biometric passports and residency permits, citizens are at risk of having their data exploited without adequate protection.

• No clear definitions of consent: The law fails to provide clear definitions of consent, withdrawal of consent, and notification in case of a breach.
• Citizens have little recourse: This leaves citizens with little recourse if their data is mishandled or exploited.

Expert Opinion

In an interview, Pierre Khoury, a legal expert in ICT and consumer protection, noted that the provisions in the law open the window for any private company with a good relationship with one of these ministers to obtain access to incredibly sensitive personal data. “This is a recipe for disaster,” he said.

Recommendations

The Lebanese parliament must take immediate action to amend this flawed law.

• Establish an independent data authority: An independent data authority should be established to oversee the processing of personal data.
• Limit scope of power: The scope of power of this authority should be limited and transparent.
• Explicitly list instances of personal data processing permits: The legislation should explicitly list all instances where personal data processing permits are required instead of broadly listing instances in which they are not.

Conclusion

In a country where personal data is regularly exploited, the Lebanese government must take responsibility for safeguarding its citizens’ sensitive information. By amending this flawed legislation, Lebanon can demonstrate its commitment to protecting citizens’ fundamental rights and taking a step towards becoming a leader in data protection.