Regulatory Alerts2025-08-07
Added · Updated
Central Bank of Jordan Decision on Data Processing for Supervised Entities
The Central Bank of Jordan issued Decision No. 2025/831 to regulate data processing by supervised entities, including banks, insurance companies, and exchange firms, under the Personal Data Protection Law No. 24 of 2023. The decision permits data processing without prior consent for specific purposes such as anti-money laundering compliance, fraud prevention, and cybersecurity, while strictly prohibiting unauthorized disclosure of client data. It mandates rigorous assessments and Board of Directors approval for transferring data to countries lacking adequate protection levels and requires entities to implement robust security measures and appoint Data Protection Officers.