Skip to content
Cookie consent · Jordan

Cookie consent for websites in Jordan

Yes, for cookies that identify a visitor. Jordan's Personal Data Protection Law (Law No. 24 of 2023) has no cookie clause, but it allows processing only with the data subject's prior consent or where the law permits, and consent must be explicit and documented. Analytics and advertising cookies wait for the visitor's yes.

What your cookie banner has to do

Five points from Law No. 24 of 2023.

  1. Ask before analytics and ad cookies

    Nothing that identifies the visitor runs until they accept. A banner shown while those tools already run does not give prior consent.

    Articles 2 and 4

  2. Explicit, documented, for a purpose and a period

    Each choice is recorded electronically, and says what it covers and for how long.

    Article 5

  3. Ask in plain language

    The request is clear, simple and easy to reach, in the visitor's language.

    Article 5

  4. No misleading design, no new purposes

    Consent won through deceptive practices, or stretched to a new purpose without asking again, is not valid.

    Article 5

  5. Count the transfer abroad

    Analytics and advertising platforms outside Jordan receive the data. That is allowed only where protection is not lower than the law's, or with consent after the visitor is told it is lower, and it can require a data protection officer.

    Articles 11 and 15

Where the law stands

The law has applied since 17 March 2024, and the one year given to organisations already handling personal data ended on 17 March 2025. The Unit inside the Ministry of Digital Economy and Entrepreneurship warns first; if the warning is ignored, the Personal Data Protection Council can impose fines of up to JOD 500 a day, capped at 3% of the previous year's revenue. Courts can add fines of JOD 1,000 to 10,000, doubled for a repeat.

Jordan PDPL guide

How Arqam360 does it

Arabic and English

A banner written in Arabic, not machine-translated, laid out right to left, with English beside it.

Tools wait for the answer

Google Consent Mode v2 signals stay denied until the visitor chooses, so Google and Meta tools hold back.

Every choice recorded

Each answer is kept with its date and time, so you can show who agreed and when.

Installs where you build

An app on Shopify and WordPress, or one line of code on any site. Or we install it for you.

Prices

Policy Pack$149Your privacy and cookie policies, written from a scan of your website
1-year pack$1,499We install the banner, test your Google and Meta tools and keep it running, for 1 website
3-year pack$2,799The same for 3 years, at a price fixed for 3 years

See what your site loads before consent

A free scan lists the cookies and tools your site sets, and which of them run before a visitor chooses.

Scan my site now

Questions

Do I need a cookie banner for a website with visitors in Jordan?

For analytics and advertising cookies that identify visitors, yes: processing personal data needs the person's prior consent unless the law permits it otherwise, and that consent must be explicit and documented. The law does not mention cookies by name.

When did the law take effect?

It took effect on 17 March 2024, six months after publication. Organisations already handling personal data had one year to adjust, until 17 March 2025.

What are the fines?

After a warning, up to JOD 500 for each day a violation continues, capped at 3% of the previous year's revenue, plus possible licence measures. Courts can impose JOD 1,000 to 10,000, doubled for a repeat.

Who enforces the law?

The Ministry of Digital Economy and Entrepreneurship, through its unit for personal data protection, and the Personal Data Protection Council that the law sets up and the Minister chairs.

Do I need a data protection officer?

Article 11 lists the cases, including processing sensitive or financial data and transferring data to databases outside the Kingdom. A site that sends visitor data to platforms abroad should check that last case.

Read next