Lebanon Law 81/2018

Overview

Lebanon's Law 81/2018 is a combined electronic transactions and personal data law — not a standalone comprehensive data protection framework. It was enacted in October 2018 and effective from March 2019. The law lacks a dedicated supervisory authority, with the Ministry of Economy and Trade serving as de facto overseer without specialized capacity. A formal definition of consent is notably absent, creating legal uncertainty.

What This Means for Your Website

• Consent is required for personal data processing, though the law does not formally define what constitutes valid consent
• There is no dedicated data protection authority — the Ministry of Economy and Trade oversees enforcement
• Criminal penalties apply for unauthorized data access and electronic document forgery
• The law's gaps and Lebanon's political and economic crisis mean practical enforcement is minimal
• Data security measures are mandatory
• The opt-in consent requirement applies in theory, but enforcement mechanisms are weak

Key Requirements

The Ministry of Economy and Trade oversees the law without specialized data protection capacity. Criminal penalties apply for severe breaches including unauthorized access and electronic document forgery. The law establishes principles of purpose limitation, lawfulness, transparency, accuracy, proportionality, storage limitation, security, and confidentiality. The absence of a formal consent definition creates uncertainty about what constitutes valid consent under Lebanese law.

How ConsentStack Handles This

ConsentStack applies opt-in consent collection for Lebanese visitors, providing a clear consent mechanism despite the law's gaps in defining consent formally.