Israel's Amendment 13 is now in force. Is your site ready?
Type in your site's address, and in under a minute see what's worth fixing: privacy policy, cookies, tracking tools and forms.
- Free, with no commitment
- Only what any visitor sees
- The results right here on screen
- Address
- Details
- Results
The check of
-
Secure connection
Checking whether the site opens on a secure connection
-
Privacy policy
Looking for a link to a privacy policy
-
Up-to-date policy
Reading the policy and checking when it was updated
-
Cookies and tracking tools
Looking for tracking tools and a cookie notice
-
Forms
Checking the forms that collect details
-
Basic server protections
Checking the server's security settings
This is a technical check of what any visitor sees on the home page. It isn't a legal opinion, and some things can only be checked from the inside, such as where the data is stored and who can access it.
The law has changed, and so has enforcement.
-
Since August 14, 2025 it's a different law
Amendment 13 to Israel's Privacy Protection Law has taken effect, and it's the most thorough update to the law since 1981. It also applies to small businesses that collect people's details, not only to large companies.
-
A form on your site has to explain itself
When you ask a visitor for a name and a phone number, you have to tell them right then who is collecting the details and why, whether they must give them, who they'll be passed to, and that they can ask to see and correct them.
-
The Privacy Protection Authority has teeth
The amendment gave the Authority the power to impose fines itself, without a court. Its guide gives exactly this as an example: a form on a site without the required explanation.
-
Visitors can sue too
Someone who gave their details without getting the required explanation, asked the business for it and didn't get it within 30 days, can sue. The court may award them up to 10,000 shekels, without their having to prove damage.
Source: The Privacy Protection Authority's guide to Amendment 13 (in Hebrew)
Six questions, a clear answer to each.
-
Secure connection
Whether the site opens on https, so what visitors type is encrypted.
-
Privacy policy
Whether the home page links to a policy that explains what is collected and why.
-
Up-to-date policy
Whether the policy mentions Amendment 13, or was updated after it took effect.
-
Cookies and tracking tools
Which tracking tools run on the site, and whether visitors are told about them.
-
Forms
Whether a form that asks for details explains why they're needed and what will be done with them.
-
Basic server protections
Whether the server sends the usual settings that protect visitors.
What the check doesn't do: It doesn't log into your admin, doesn't fill in forms and doesn't see what's stored on your server. It reads only the home page and the privacy policy it links to, like any visitor.
Three steps, about a minute.
-
An address and two details
Type in your site's address, your name and phone, and agree that I'll get back to you.
-
Results on screen
The check runs and shows you, line by line, what's fine and what's worth fixing.
-
A short call
I'll get back to you, we'll go over what I found together, and if you like, I'll fix it on your site.
What people ask before the check.
Does the check cost anything?
No. The check is free, with no commitment. Afterwards I'll get back to you, we'll go over what I found together, and if you like, I'll suggest how to fix it.
What exactly is checked?
Six questions about your home page: whether the site opens on a secure connection, whether it links to a privacy policy and whether the policy mentions Amendment 13 or was updated after it, which tracking tools run and whether visitors are told about them, whether forms explain why they ask for details, and whether the server sends the usual security settings.
Is this a legal opinion?
No. It's a technical check of what any visitor can see on the site. It helps you see what's missing, but it doesn't replace legal advice, and some things can only be checked from the inside, such as where the data is stored and who can access it.
What happens to the details I left?
They reach me by email together with the results of the check, and I use them only to get back to you about this check. Apart from the site's hosting provider and the email provider, they aren't passed to anyone and don't go on any mailing list, and you can ask me at any time to see them, correct them or delete them.
My site is built on Wix, Shopify or WordPress. Does that matter?
Any site that opens in a browser can be checked. On sites where part of the content loads only in the browser, some things can't be seen from the outside. In that case I'll mark them as not checked, and we'll go over them together on a call.
Want to know where your site stands?
One minute, six questions, and a clear answer to each.