VPNs with servers in Israel

The head of the police investigations and intelligence bureau may also require providers to supply subscriber identification data, device identifying numbers and antenna-mapping data for a police database (ss. 6–7). A provider may not tell a subscriber of a transfer, on pain of two years in prison (ss. 5, 11).

Under section 11 of the Israeli Security Agency Law (5762-2002) the Prime Minister may set in rules the types of information in an authorised provider’s databases that the Agency needs, and the provider must transfer them. The Agency’s head permits use for up to six months, renewable; the Prime Minister’s rules set how long providers keep it. Whether a VPN operator is a licensee under either law is not established.

According to press reports, a law passed on 17 July 2017 lets a district court judge, specially authorised by the court president, order internet providers to block sites tied to illegal gambling, prostitution and child pornography advertisements, online sales of hard drugs and synthetic cannabinoids, and websites of terror organisations. Courts may also order search engines to remove such sites from results. A provider that does not comply faces two years in prison.

Section 24 of the Counter-Terrorism Law, adopted in 2016, criminalises under conditions identification with a terrorist organisation: public praise or support, displaying its flags or symbols, and uttering its slogans or anthems. Membership of a terrorist organisation, and providing it services, each carry up to five years. The Minister of Defence designates organisations after an advisory committee, and the High Court may review the designation.

In HCJ 3809/08, decided on 28 May 2012, the High Court rejected a petition against the Communications Data Law but read it narrowly: personal communications data may be collected only for the investigation of a concrete crime, and the administrative route is for extreme cases where a court order cannot be obtained.

On 26 April 2020 a three-judge panel held that the Security Agency’s phone tracking of coronavirus carriers could not continue unless anchored in primary legislation, finding that it severely violates the constitutional right to privacy. The order of the rows is the security score, and a server’s location is not a recommendation.