The framework
Syria has enacted Law No. 12 of 2024 on the Protection of Electronic Personal Data, but the regime is not yet fully operative.
Until the law demonstrably applies, platform policies and the extraterritorial reach of laws like the GDPR set the practical rules for campaigns here.
Key instruments
Law No. 12 of 2024 on the Protection of Electronic Personal Data
Syria's previous government enacted Law No. 12 of 2024 on the protection of electronic personal data, with a dedicated authority. Since the December 2024 change of government there is no clear public record of the law being implemented or enforced.
Marketing and advertising
The 2024 law exists on paper; whether and how it applies since the December 2024 change of government is unclear. With no operative local consent rule, the practical guardrails are platform policy and any foreign law that can reach the campaign.
Cross-border transfers
The 2024 law's transfer rules show no visible enforcement. In practice, the binding transfer rules for most international campaigns touching this market come from the origin jurisdiction of the data.
Enforcement and penalties
No enforcement has been observed under the 2024 law.