LexLint

The law for AI, agents, crawlers, and personal data

Law / Syria

Syria

privacy

Syria enacted a general personal-data statute, Law No. 12 of 2024 on Protection of Electronic Personal Data, issued by presidential decree under the Assad government.

No source reachable in this research contains the statute's actual text: the strongest primary source located is the Syrian Arab News Agency's (SANA) own announcement of the President's issuance, a two-paragraph notice archived at archive.sana.sy that confirms the law's existence, its general subject matter (collecting, processing, using, and transferring personal information on the network), and its criminal penalty range, but is not the enacted text itself.

This document therefore does not code the law's operative provisions (definitions, cross-border rules, data-subject rights, or the supervisory body's actual powers); six of the seven research dimensions this topic tracks are unestablished for Syria and are left so rather than filled from secondary commentary.

On status: the Assad government fell 8 December 2024 and a transitional government took office 29 March 2025; independent secondary reporting converges, without contradiction, that Law 12/2024 has not been repealed but also has not been formally continued or re-affirmed by the transitional administration, and no source found confirms it is being actively administered or enforced today.

A secondary tracker's claimed "issued June 2024, effective January 2025" dating is not carried here because it conflicts with the primary SANA timestamp (2024-03-28) and could not be reconciled.

The transitional authorities are actively reshaping the surrounding legal and digital-governance landscape (a July 2026 Ministry of Information public consultation on a new media law, a 7 January 2025 directive restricting government and NGO digital data collection to the Ministry of Communications and Information Technology's own platforms, and independent security research finding government data-collection portals hosted on unencrypted foreign servers), so this jurisdiction is recorded as fast_moving rather than settled, even though Law 12/2024's own status has not moved since the last check.

4 instruments named 1 researched in detail As of 2026-08-29

Instruments

Each one links to its LexLint note, which carries what it requires and what it flags on.

Comprehensive regime

Law No. 12 of 2024 on Protection of Electronic Personal Data

cite Law No. 12 of 2024 (Syrian Arab Republic), issued by presidential decree stage IMMINENT commencement not set binds private bodies source Syrian Arab News Agency (SANA), official state news agency, presidential-issuance announcement
What it requires →

Syria's state news agency confirms a presidentially-issued law regulating the collection, processing, use, and transfer of personal information on the network, with penalties up to 12 million Syrian Pounds and up to three years' imprisonment for violations. No primary source for the statute's own text, including its definitions, data-subject rights, cross-border transfer rules, or the powers of any supervisory body, was reachable in this research.

Secondary regulatory trackers claim the law provides for cross-border transfer conditions and a "Personal Data Protection Authority" of weakly-defined independence, but neither claim could be verified against primary text and neither is recorded as a finding here. Whether the law is being administered following the government's fall in December 2024 and the transitional government's formation in March 2025 is unresolved: no source found confirms active enforcement, and none confirms repeal.

This summary covers the instruments LexLint has researched to a stage. Instruments named in the corpus but not yet researched are counted above and are not listed here. Every entry carries its own primary source on its note page. This is a research index, not legal advice.