Skip to main content

Lebanon Law 81/2018

Electronic Transactions and Personal Data Law (Law 81/2018)

Lebanon's electronic transactions and data protection law lacking independent supervisory authority, relying on court remedies for enforcement.

Jurisdiction

Lebanon

LB

Enacted

Oct 10, 2018

Effective

Mar 1, 2019

Enforcement

Courts (no independent DPA)

No independent DPA - court remedies only; weak enforcement

Who Must Comply

This law applies to:

  • Data controllers and processors in Lebanon
  • Electronic transaction operators
  • Entities processing Lebanese residents' data

Capability triggers:

dataProcessing (required)
Required Increases applicability

Who bears obligations:

Safety Provisions

  • Data subject rights to access and correction
  • Consent requirements for data processing
  • Security measures for personal data
  • Electronic transaction authentication

Enforcement

Enforced by

Courts (no independent DPA)

Penalties

Civil remedies through courts; weak enforcement

Private Right of Action

Individuals can sue directly without waiting for regulatory action. This significantly increases liability exposure.

Quick Facts

Binding
Yes
Mental Health Focus
No
Child Safety Focus
No
Algorithmic Scope
No
Private Action
Yes

Why It Matters

Lebanon's lack of independent DPA and weak enforcement creates regulatory uncertainty for AI chatbot compliance, relying on civil litigation.

Cite This

APA

Lebanon. (2018). Electronic Transactions and Personal Data Law (Law 81/2018). Retrieved from https://nope.net/regs/lb-law-81-2018

BibTeX

@misc{lb_law_81_2018,
  title = {Electronic Transactions and Personal Data Law (Law 81/2018)},
  author = {Lebanon},
  year = {2018},
  url = {https://nope.net/regs/lb-law-81-2018}
}

Related Regulations

In Effect IL Data Protection

Israel Privacy Amendment 13

Israel's most significant privacy reform in 40 years, explicitly covering AI systems. Requires Data Protection Officers (DPOs) for entities processing sensitive data at scale, mandates Data Protection Impact Assessments (DPIAs) before AI deployment, and enhances Protection of Privacy Authority enforcement powers. One of first data protection laws to explicitly require DPIAs before AI development or deployment.

In Effect JO Data Protection

Jordan PDPL

Jordan's data protection law with medical data processing exceptions, data portability rights, and oversight including security services.

In Effect SA Data Protection

Saudi Arabia PDPL

Saudi Arabia's comprehensive personal data protection law with extraterritorial scope, DPO requirements for sensitive processing, and National Data Governance Platform registration.

In Effect EG AI Safety

Egypt AI Strategy 2025

Ambitious national strategy positioning Egypt as regional AI hub for Africa and Middle East. Targets 7.7% ICT sector GDP contribution by 2030, training 30,000 AI specialists, establishing 250 AI companies. Built on six strategic pillars: governance, infrastructure, technology, data, ecosystem, and talent. Accompanied by Egyptian Charter for Responsible AI (April 2023) with ethics principles.

In Effect QA AI Safety

Qatar QCB AI Guidelines

Binding AI governance requirements for Qatar's financial sector. Mandates board-level accountability, risk assessments, human-in-the-loop for high-impact decisions, and prior QCB approval for high-risk AI systems.

In Effect AE Online Safety

UAE Media Law

Comprehensive media regulation requiring licensing for all digital platforms, social media operations, and influencers. 20 binding content standards with significant penalties.