Do I need a data protection officer under Jordan's PDPL?
Article 11 lists five cases, and the Council can add more: processing personal data as your main activity, processing sensitive data, data of people who lack legal capacity or financial information, and transferring data outside the Kingdom. An online store sending visitor data to analytics platforms abroad can fall into that last case.
The officer is an obligation of the business itself, separate from what its website shows visitors.
Reviewed by Taha, our privacy expertLast reviewed
Read the full Jordan PDPL guide