DPO for Kibbutzim

Amendment 13 applies to every Israeli entity that processes personal data, and a kibbutz processes personal data at scale — members, children, employees, clinic patients, welfare applicants. A kibbutz is a cooperative society, not a public body, so the automatic DPO obligation does not apply; but if it processes sensitive personal data on a large scale (members + welfare + health + education + minors) — which is almost always the case — it falls under the category that triggers the obligation to appoint a DPO. Full guide: who must appoint a DPO.

Mostly for the scope of work. A cooperative kibbutz (~12%) has one central member database — concentrated and easier to control. In a renewing kibbutz (~76%) each household is an economic unit: distributed registers, asset allocation, individual salary data — that is where most of the regulatory complexity sits. A hybrid kibbutz runs both models in parallel. The legal duties are identical in all three — only the mapping effort changes.

A commercial entity owned by the kibbutz is a separate legal person. If it is a vendor to a public body, trades in data, or processes sensitive data at scale — it requires its own DPO. Most large kibbutz factories already qualify, even if the kibbutz itself does not.

Partially. The June 2019 circular charted a useful path for database mapping and security tiering. But it predates Amendment 13 — it does not mention the DPO obligation, the new monetary penalties (hundreds of thousands to millions of NIS), or the personal liability of decision-makers. A kibbutz that relies only on the 2019 baseline does not meet Amendment 13.

A camera in a kibbutz public space is a database. You need: visible signage, a defined and proportionate purpose, a matching security tier, and a retention and deletion policy. In a kibbutz it is especially sensitive because cameras also capture children who are not members (expansion residents, visitors) — which mandates a higher security tier.

Neither. Both the secretary and the community manager make business decisions that the DPO is supposed to oversee — an inherent conflict of interest, and the Authority has been clear about it. The practical model for kibbutzim: an outsourced DPO who works with the committees and management but is not subordinate to them. The appointment is formalized with a DPO appointment letter.

Depends on the content. Organizational announcements to members are internal communications. But trade groups ("for sale", "looking for") with auto-added members, or promotional broadcasts from kibbutz businesses, can fall under the direct-marketing rules. The review is content-by-content, not platform-by-platform.

Depends on the kibbutz size, complexity (cooperative / renewing), number of corporate subsidiaries, and number of databases. Have a look at the tiers, or just talk to us — the intro call is free.