A Year and a Half into Amendment 13: Cases Opened and Fines in the Hundreds of Thousands of Shekels

A year and a half after Amendment 13 to the Privacy Protection Law took effect, the authority has opened 178 proceedings against banks, health funds, and local authorities, imposing fines totaling hundreds of thousands of shekels on four entities, including Meuhedet Health Fund and the Beit Shemesh Municipality.

Nearly a year and a half after Amendment 13 to the Privacy Protection Law came into effect in August 2025, the Privacy Protection Authority at the Ministry of Justice has opened 178 new proceedings against banks, health funds, and local authorities. Of these, 158 cases are still under investigation and 20 have been closed. So far, four financial penalties have been imposed: on Meuhedet Health Fund (256,000 shekels), Menora Mivtachim (256,000 shekels), Beit Shemesh Municipality (64,000 shekels), and A.D. Karting Hutzot Ltd. (12,000 shekels). The most common issues in the proceedings are severe data security incidents, suspected data leaks, and notification obligations. Experts note that the amendment is changing organizations' approach to privacy, turning it from a formal compliance issue into a managerial and financial risk.