Trains models, in Jordan

Law No. 22 of 1992 on Copyright Protection, as amended up to Law No. 23 of 2014, Art. 17 · Read the law's page

• A passage of a published work may be quoted in another work without the author's authorization only for clarification, explanation, discussion, criticism, education, or testing, to the extent justified by the purpose, with the source and the author's name stated, and only where the use does not conflict with the normal exploitation of the work or cause unjustified harm to the right holder's legitimate interests (Article 17).
• Jordan's Copyright Protection Law carries no text-and-data-mining-specific exception or machine-readable opt-out, so training a model on scraped copyrighted text is not clearly authorized outside this enumerated quotation exception.

Cyber Security Law No. (16) of 2019, Article 8(b) · Read the law's page

• Adhere to the policies, standards, and controls the Center issues for the institution's own sector, provide the Center the information it needs to do its work, and inform the Center of any incident that threatens cybersecurity or the security of cyberspace, taking every step necessary to prevent or avoid it.
• If the Council of Ministers has delegated some of the Center's tasks and powers to you as an oversight body, government department, or official or public institution, notify the Center immediately upon the occurrence or suspicion of a cybersecurity incident (Article 11(b)).when it serves a public body
• Where the incident is Critical or High severity, in particular where it touches critical infrastructure, a security or military body, a ministry or government institution, a government-owned or government-invested company, a supply chain feeding those entities, or where it disrupts essential services entirely at a higher-education institution, the Center's own Incident Response and Reporting Policy sets the time to report to the Center and the sectoral body at 1 hour at most for a Critical-tier incident, 2 hours for High, 4 hours for Medium, and 24 hours for Low; an ordinary private company or individual establishment with no such touchpoint is typically classified Medium or Low.
• Where the National Cyber Security Council designates an incident a threat to the Kingdom's own security and safety, the Center directs the response and every institution involved must comply with the Center's instructions and directives.
• This binds any ministry, government department, or official, public, private, or civil institution operating in Jordan; the National Cyber Security Center's own subsidiary instructions define the bound entity to include any company or individually registered establishment in the Kingdom, and the duty carries no sector, size, or personal-data gate of its own.
• A violation may draw a written warning, an order to correct the violation and reimburse the Center's resulting costs, blocking, cancellation, confiscation, or disabling of the offending network, system, or device, a requirement that the institution take legal measures against a responsible employee, suspension or cancellation of a cybersecurity-services license, or a fine of between 500 and 100,000 Jordanian dinars doubled for a repeated violation, imposed by the Center itself rather than through a private lawsuit.

Law No. 17 of 2023 on Cybercrime, Arts. 3-4, 6-7 · Read the law's page

• Do not access a website, information network, information system, or information technology means, in whole or in part, without authorization or in excess of an authorization granted.
• Do not use a program or program command to disable, alter, damage, or gain unauthorized access to an information system, and do not intercept or capture data transmitted through one.
• Accessing a network, system, or website belonging to a government, security, financial, or banking institution without permission, or in excess of a permit, carries a heightened penalty where it reaches non-public data affecting national security, foreign relations, public safety, or the national economy.