Generates images with AI, in Israel

Privacy Protection Regulations (Data Security), 5777-2017, Regs. 1-10, 11(a)-(c), 12-20, 22; Protection of Privacy Law, 5741-1981, Art. 23KF and Third Schedule (enforcement) · Read the law's page

• An app operating a database of the personal data of a person in Israel, above the small-collection thresholds already recorded on this jurisdiction's privacy-topic row, must prescribe a written data security procedure covering physical protection, access authorizations, identification and authentication, encryption, and incident handling, scaled to the security-level tier (basic, medium, or high) that the volume and sensitivity of the data it holds places it in.
• At the medium or high tier, run an automatic mechanism monitoring access to the database's systems, retained at least 24 months, and appoint a data security officer where required.
• At the high tier, conduct a data security risk assessment and a penetration test of the database's systems at least once every 18 months, and hold a quarterly internal discussion of security incidents.
• At the medium or high tier, conduct an internal or external audit of compliance with these Regulations at least once every 24 months.
• Where an external service provider is given access to the database, agree in writing on the data and systems it may access, its reporting and data-destruction duties, and monitor its compliance.

Ministry of Innovation, Science and Technology and Ministry of Justice, Policy, Regulation and Ethics Principles in the Field of Artificial Intelligence ('Responsible Innovation' Policy), December 2023

Elections for the Twenty-Sixth Knesset (Special Provisions and Legislative Amendments) Law, 5786-2026, section 12 (temporary section 2A2 of the Elections (Propaganda Methods) Law, 5719-1959) · Read the law's page

• If you publish election propaganda for the Twenty-Sixth Knesset election that appears deeply real, meaning content created by digital means, artificial intelligence included, or edited by them so as to change it materially, attach a disclosure stating clearly and prominently that its content was not originally recorded.
• Follow the rules the Chair of the Central Elections Committee sets for meeting that disclosure duty.
• The duty reaches election propaganda first published on or after the day the section takes effect, and runs until one year after election day.

Council of Europe Framework Convention on Artificial Intelligence and Human Rights, Democracy and the Rule of Law (Council of Europe Treaty Series No. 225), opened for signature 5 September 2024; Israel signed 5 September 2024; not yet ratified

• Ensure that AI systems are consistent with human rights, democracy, and the rule of law throughout their lifecycle.
• Provide transparency and oversight when public authorities make consequential AI-assisted decisions.when it serves a public body
• This measure is proposed and binds nobody yet; what follows is what it would require if it is enacted in this form.

Privacy Protection Authority (Rashut Haganat Hapratiyut), Draft Guidance on Application of the Privacy Protection Law, 5741-1981 to Artificial Intelligence Systems, published 30 April 2025; public comment period closed 5 June 2025

• This measure is proposed and binds nobody yet; what follows is what it would require if it is enacted in this form.
• Disclose to users when they are interacting with a chatbot or other automated system.
• Provide a meaningful description of how your AI functions.
• Offer users a path to human review for decisions with significant consequences.
• Have a lawful basis before collecting personal data with AI crawlers.
• Apply purpose limitation and data minimization to personal data used to train AI models.