“New study: Jordanian ISPs violate customers’ privacy”, 10 November 2019

Customer privacy is routinely violated by…prominent Jordanian ISPs [Internet Service Providers], reveals a study conducted by ImpACT International for Human Rights Policies...and Access Now. The study showed…ISPs…collecting often intrusive information, without…disclosing…or explaining how the data is used. “…the results were shocking and draw great concern…”, Sami Zeno, ImpACT International. The study focused on five of the largest ISPs in Jordan - Zain, Orange, Umniah, TE Data and Damamax. Visiting the companies’ websites and posing as callers to their…hotlines…, ISP staff and customers [were surveyed] on awareness of company practices and the importance of personal data-protection…

…Zain, Orange, Damamax and TE Data do not clearly divulge the personal information they collect from customers on their websites. Umniah is clear - if customers notice the link at the bottom of its home page - but says nothing about how [such information] will be use[d]: “our sites or…our apps will automatically collect…the type of mobile device,…contact information, friends lists, login information, photos, videos…, check-ins [and] any other information stored on your device”.

“The study has additionally established clear guidelines for the Jordanian government and telecoms companies”…Dima Samaro, Access Now. Zain was the only ISP that clearly stated that it collects such personal information,…[but] like all buy one of the [ISPs], [it] does not address customers’ right to compensation if their rights are violated. [Umniah]…states…customers relieve [them] of…legal responsibility for the misuse of their data. ImpACT International…and Access Now conclude that none the ISPs examined...fully respect and comply with human rights principles, and…users in Jordan face a real threat to their privacy. ISPs…doing business in [Jordan] process personal data for EU citizens visiting or working in Jordan, [meaning] that…[they] should [also] comply with [GDPR]...