Ships a mobile app, in Israel

Equal Rights for Persons with Disabilities (Accessibility Adjustments to Service) Regulations, 5773-2013, regs. 35-35F (Hebrew regulations 35-35ו) · Read the law's page

• If you are not a public authority and provide a public service through a website, a document or an app, provide accessibility adjustments in that internet service in accordance with Israeli Standard 5568, the guidelines for accessibility of web content in its parts and annexes as amended from time to time, at the level AA the regulation names, other than for apps and time-based media (regulations 35 and 35א(א)); where a regulation refers to an Israeli standard, following the version in force when you made the adjustment meets the duty (regulation 109(א)).
• A document prepared from 26 October 2017 onward and uploaded to your website or app, such as a PDF, must be accessible under the standard's provisions on documents, and while there is no standard on documents, make the adjustments the software in which it was created or edited reasonably allows (regulation 35א(ג)(1)).
• A data-entry form used to receive a service, and a document prepared after 26 October 2015 that explains such a form, must meet the requirements even if prepared before 26 October 2017 (regulation 35א(ג)(2)).
• A document holding a service recipient's personal information, given behind a login and prepared from 1 January 2022 onward, must be accessible under the standard's provisions on documents (regulation 35ו(ו)(2)).
• When you receive a notice demanding correction of a deviation from the standard, correct it within a reasonable time and no later than 60 days from receipt, and provide alternative adjustments as soon as possible to ensure access to the service (regulation 35א(ד)).
• If other parties supply or upload content to your internet service and you do not edit or produce it, you are not responsible for adjustments in that content, but you must supply an accessible infrastructure, including accessible fields such as an image description field (regulation 35ב).
• If you operate an app for a device other than a desktop or laptop computer, meet the requirements of an Israeli standard for such apps where one exists; where none exists, apply the success criteria of the web standard as far as possible and relevant, on at least two common operating systems, which the Commissioner may name in a directive (regulation 35ג(א) and (ב)).
• You are exempt for an app if you operate an identical service on a website adapted to such devices that meets the web standard, and the app then carries an accessible link to that website (regulation 35ג(ג)).
• If you have an average turnover above NIS 5 million and you edit or produce recorded video content, provide captions meeting success criterion 1.2.2 (Captions (Prerecorded)) of the standard, and an accessible text or recorded alternative for video information that is needed to receive the service and is not given another way; for a recording of a conference, discussion or lecture, an accessible alternative such as a transcript or minutes may be provided instead of the captions (regulation 35ד(ב) and (ג)(1)). A turnover check that comes out below NIS 5 million is valid for three years (regulation 35ד(א)).
• If you provide a television program that must carry accessibility adjustments under the Television Broadcasts (Subtitles and Sign Language) Law, 5765-2005, in your internet service, make sure those adjustments also exist there unless technology does not allow it (regulation 35ד(ג)(2)).
• Display a prominent accessibility statement on your website and on any app you operate, following the standard's guidelines on accessibility statements, with the adjustments made, the accessibility coordinator's details if you must appoint one, and details for reporting a missing adjustment or asking for one (regulation 35ה).
• You are exempt from these adjustments if you are an exempt dealer or your average annual turnover is NIS 100,000 or less (regulation 35ו(ז)).
• You are exempt for a website or app you began operating before the Regulations took effect if your average turnover is NIS 1,000,000 or less and your contact details for receiving the service are published on that internet service or, as far as possible, on another website that meets the accessibility requirements; the exemption lasts three years from the end of the last tax year included in the turnover check and can be renewed every three years (regulation 35ו(ט)).
• You are exempt from adjustments in the content of an internet service that only registered users can enter and that has at most 500 registered participants at once, unless a person with a disability asks for them, and the 60-day correction period does not apply to such a request (regulation 35ו(ה)).
• A licensed service accessibility expert may exempt you from a specific adjustment that your platform or technological interface does not technologically allow, for up to three years, renewable for a further period of up to three years, with any further exemption given by the Commissioner for special reasons; you then provide alternative accessibility, publish the exemption in your accessibility statement and give the exemption form to a person with a disability who asks (regulation 35ו(א), (ב) and (ג)).
• You are exempt from a specific adjustment in a service you run on a social network's infrastructure if that infrastructure does not allow it, and the regulation does not apply to advertisements where an accessible alternative to their information about the service exists (regulation 35ו(ד) and (י)).
• Check the auxiliary aids and services in your service, including the adjustments in your internet services, at least every five years using the form the Commissioner publishes, keep the results available to the public, and make the adjustments the check calls for within six months (regulation 28).
• A new internet service must be accessible from the day you start providing it (regulation 105(ב)).

Privacy Protection Regulations (Data Security), 5777-2017, Regs. 1-10, 11(a)-(c), 12-20, 22; Protection of Privacy Law, 5741-1981, Art. 23KF and Third Schedule (enforcement) · Read the law's page

• An app operating a database of the personal data of a person in Israel, above the small-collection thresholds already recorded on this jurisdiction's privacy-topic row, must prescribe a written data security procedure covering physical protection, access authorizations, identification and authentication, encryption, and incident handling, scaled to the security-level tier (basic, medium, or high) that the volume and sensitivity of the data it holds places it in.
• At the medium or high tier, run an automatic mechanism monitoring access to the database's systems, retained at least 24 months, and appoint a data security officer where required.
• At the high tier, conduct a data security risk assessment and a penetration test of the database's systems at least once every 18 months, and hold a quarterly internal discussion of security incidents.
• At the medium or high tier, conduct an internal or external audit of compliance with these Regulations at least once every 24 months.
• Where an external service provider is given access to the database, agree in writing on the data and systems it may access, its reporting and data-destruction duties, and monitor its compliance.