Full Breakdown
Israel's Proposed Cyber Law: A Step Towards Enhanced Cybersecurity
1/26/2026, 8:25:42 AM
Overview of the Proposed Legislation
Israel is advancing a significant cyber law that could establish the country’s first permanent framework for cybersecurity. The bill, which is set to be reviewed by various Knesset committees next month, aims to enhance the capabilities of the Israel National Cyber Directorate (INCD) in responding to cyber threats from adversaries such as Iran, Hezbollah, and Hamas. Currently, the INCD operates under temporary regulations and executive decisions, limiting its effectiveness compared to other Western nations that have implemented comprehensive cyber legislation.
Key Provisions of the Cyber Law
The proposed law introduces immediate reporting requirements for critical private-sector and government agencies in the event of a cyberattack that poses "potential grave damage" to the country. This contrasts with initial laws in other democracies, which typically allow reporting periods of 24 to 72 hours. The urgency for this legislation has been underscored by a surge in cyberattacks, particularly since the onset of the Israel-Hamas War, making Israel the third-most-cyber-attacked country globally.
Oversight and Accountability Measures
To ensure oversight, the INCD will be required to report annually to the attorney-general and the Knesset Foreign Affairs and Defense Committee regarding the cyberattacks and information received from private-sector entities. This annual reporting is a reduction from the bi-monthly updates previously mandated under emergency regulations, highlighting a shift towards a more structured and permanent legal framework.
Historical Context and Challenges
The INCD has sought to establish a permanent cyber law for nearly a decade, with various leaders attempting to navigate the complexities involved. Former INCD chief Gaby Portnoy emphasized the need for a national cyber law that encompasses the entire country, not just the INCD. This complexity has contributed to delays in passing the legislation. His successor, Yossi Karadi, now faces the challenge of finalizing the law, which is seen as essential for enhancing Israel's cybersecurity posture.
Criticism and Concerns
Despite the potential benefits, there are concerns regarding privacy and the implications of mandatory reporting for private-sector companies. Critics argue that the requirement to disclose sensitive information could undermine business interests and lead to misuse of data. The balance between national security and individual privacy remains a contentious issue as the law progresses.
Official Statements
Yossi Karadi stated, “The State of Israel is under constant attack by our enemies who are undertaking efforts to harm the ongoing functionality of operations and our lives.” This sentiment reflects the urgency behind the proposed legislation and its intended role in bolstering national cybersecurity.
What's Next
As the Knesset prepares to review the proposed cyber law, the INCD's ability to implement effective cybersecurity measures will be closely monitored. The outcome of this legislation could significantly reshape Israel's approach to cyber defense and its readiness against future threats.
