Across the Middle East and North Africa, data protection legislation is still in its infancy, and it remains a low priority in countries where data protection laws are either very weak or non-existent. In this report, the authors explore data protection legislation in Jordan, Lebanon, Palestine and Tunisia.