Law note · Syria
Law No. 12 of 2024 on Protection of Electronic Personal Data
What it requires
- Syria enacted a law regulating the collection, processing, use, and transfer of personal data on electronic networks, but no primary source confirms its commencement date, its operative provisions, or whether any institution administers or enforces it today, particularly after the change of government in December 2024. An app processing the personal data of a person in Syria, including a voiceprint or faceprint, should treat this law as a confirmed source of legal exposure (criminal penalties of up to 12 million Syrian Pounds and up to three years' imprisonment are stated in the government's own issuance announcement) without relying on any specific compliance mechanism, since none has been verified against the statute's own text.
When LexLint raises it
crawls_webtrains_modelsgenerates_contentdeploys_chatbotautomated_outreachhigh_risk_decisionsprocesses_voiceprocesses_biometrics
What we found
Syria's state news agency confirms a presidentially-issued law regulating the collection, processing, use, and transfer of personal information on the network, with penalties up to 12 million Syrian Pounds and up to three years' imprisonment for violations. No primary source for the statute's own text, including its definitions, data-subject rights, cross-border transfer rules, or the powers of any supervisory body, was reachable in this research.
Secondary regulatory trackers claim the law provides for cross-border transfer conditions and a "Personal Data Protection Authority" of weakly-defined independence, but neither claim could be verified against primary text and neither is recorded as a finding here. Whether the law is being administered following the government's fall in December 2024 and the transitional government's formation in March 2025 is unresolved: no source found confirms active enforcement, and none confirms repeal.
Primary source
Syrian Arab News Agency (SANA), official state news agency, presidential-issuance announcement
not the enacted statute text itself