"In this report, we highlight how privacy and data protection violations by state and non-state actors are compounded by the lack of legal data protection safeguards which would obligate public entities, private companies, and international organizations to respect and adhere to data protection principles, empower users to take agency and control over their personal information, and create mechanisms for grievance and redress when such violations occur. We explore these issues and propose safeguards and policy recommendations for those involved in the collection and processing of personal data: governments, private companies, and international aid organizations. We include case studies for Jordan, Lebanon, Palestine, and Tunisia. Our goal is not to include an exhaustive list of all cases related to data protection, but to present a few key illustrative cases for each country." (Executive summary, page 3)