Jordan

Summary

Jordan presents moderate-to-high risk for crawling. The Cybercrime Law No. 17 of 2023 (in force 13 September 2023, replacing the 2015 law) criminalises unauthorized access to information networks and systems; Art. 3 imposes one week to three months imprisonment or a fine of JD 300-600 for bare unauthorized access, escalating to 1-3 years and JD 3,000-15,000 where the intruder copies, deletes, modifies, discloses, blocks, or transmits data. The broad drafting — "information network or system" is defined expansively — creates non-trivial exposure for automated scraping even of public websites, particularly where data is copied at scale. The law has been widely criticized by Amnesty International, Human Rights Watch, and others for overbroad drafting. The Personal Data Protection Law No. 24 of 2023 (PDPL, in force 17 March 2024, grace period ended 17 March 2025) is Jordan's first comprehensive data- protection statute; it requires a lawful basis for processing, imposes cross-border transfer restrictions (transfers require equivalent protection in the receiving state), mandates breach notification within 72 hours to the regulator, and applies to all personal data within Jordan regardless of when collected. Penalties range from JD 1,000-10,000, doubled for repeat offences. No TDM copyright exception exists under the Copyright and Neighboring Rights Law No. 22 of 1992; the exception list is closed. There is no EU-style sui generis database right. No scraping-specific case law is available in English-language sources.