Personal Data Protection Law, data subject rights

Law No. 24 of 2023, data subject rights list

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force since 17 March 2024.

A data subject rights rule binding public and private bodies.

As of 29 August 2026.

What it requires

An app must let an individual in Jordan object to processing or profiling of their data that is unnecessary, excessive, discriminatory, or unlawful for its stated purpose, must let them obtain erasure or concealment of their data and a portable copy transferable to another controller, and must notify them of any data breach affecting the security or integrity of their data.

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

A numbered rights list confirms, read verbatim: erasure or concealment of data (item 5), objection to processing and profiling that are unnecessary, excessive, discriminatory, prejudiced, or unlawful for the purposes collected (item 6), transfer of a copy of the data from one controller to another, i.e. portability (item 7), and being notified of any data breach or violation regarding the security and integrity of the data (item 8).

Items 1-4 of the same list, likely including access and correction rights, were not individually extracted, though the numbering implies they exist.

When LexLint raises it

crawls_web
trains_models
deploys_chatbot
automated_outreach

Read the law

official bilingual statute text, Ministry of Digital Economy and Entrepreneurship

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app