A legal opinion out of Israel’s Privacy Protection Authority issued Nov. 28 said that businesses with at least 10,000 electronic contacts are required to follow the country’s data security and privacy protection laws for those lists, Bloomberg Law reports. The authority stated that such a list constituted a “database,” even if it only includes names and email addresses. Fines for noncompliance could be up to $26,800 and a year in prison for each injured party. Some have raised issue with the authority’s opinion, pointing to an existing law that excludes “a collection that includes only the name, address and method of communication” as a database.
Full Story