Trains models, in State of Palestine

Palestinian Basic Law (Amended) 2003, Arts. 17 and 32 · Read the law's page

• Palestine has no comprehensive personal-data-protection statute; these articles do not themselves create data-processing duties like lawful basis, consent, or breach notification. An app operating in Palestinian territory whose activity, including collecting or using a person's voiceprint, faceprint, or other private information, violates a person's personal freedom or the sanctity of their private life may face criminal prosecution under Article 32 of the Basic Law, which also provides that civil cases arising from such violations are not subject to a statute of limitations and that the National Authority shall guarantee a fair remedy; it states no cause of action of its own for routine data processing. Entering or searching a home to obtain data without a valid judicial order is separately barred by Article 17.

Law by Decree No. 10 of 2018 on Cybercrime, arts. 4-9 · Read the law's page

• Do not access a website, system, network, or means of information technology without authorisation, or continue accessing it after learning the access is unauthorised, or exceed the scope of authorised access (art. 4(1)).
• A heavier penalty applies where the accessed data is government data, or where the access results in cancelling, deleting, altering, publishing, republishing, or otherwise damaging electronic data, or in impersonating the site's owner or manager (art. 4(2)-(4)).
• Do not obstruct or disrupt access to a service, device, programme, or data source on the network (art. 5).
• Do not introduce anything that suspends or disrupts a system's operation, or damages, deletes, or modifies a programme, on the network (art. 6).
• Do not receive, record, intercept, or wiretap data sent through the network without authorisation (art. 7).
• Reading a public, unauthenticated page without exceeding any scope of access a site has authorised has not itself been held to violate this decree; no Palestinian court decision construing 'exceeds the authorised access' for a public page was found.