The framework
The operative statute in Jordan is the Personal Data Protection Law No. 24 of 2023, enforced by the Personal Data Protection Council.
For media planning that means an opt-in posture, with consent capture built before campaigns launch.
Key instruments
Personal Data Protection Law No. 24 of 2023
Jordan's first comprehensive law took effect in March 2024 after a one-year transition, giving the region another GDPR-influenced consent regime; implementing regulations continue to roll out.
Marketing and advertising
Consent-first with listed exceptions; explicit rules for direct marketing consent. Treat the consent note above as the planning rule; the penalty line below is what mispricing it costs.
Cross-border transfers
Transfers abroad need an adequate destination or appropriate safeguards such as contractual clauses.
Enforcement and penalties
Administrative fines apply, and the authority can act against licences.