It is reported that technical standards (Jordan Quality Mark) are published in the Jordan Official Gazette in hard copy only and are registered in the Jordan Quality Mark database. Businesses need to purchase from the Jordan Standards and Metrology Organisation (JMSO) for the Jordan Official Gazette as well as a disk with the Jordan Quality Mark database.

It is reported that the conformity assessment procedures for EMC/EMI employed in Jordan consist of a process whereby the supplier or manufacturer declares that the equipment complies with the applicable technical and administrative requirements. The equipment is tested by a laboratory accredited by the regulatory authority and the supplier registers the equipment with the regulator.

Art. 3 of Instruction No. 3/2020, issued under the provisions of Art. 3.5 and Art. 55 of Ordinance No. 111/2017, sets forth the conditions for the accreditation of international electronic payment systems. The regulation requires providers of international electronic payment systems to:
- provide their services in one country or more other than in Jordan; and
- provide their services for a period of not less than three consecutive years prior to the date of submitting the request for obtaining accreditation.

It is reported that the de minimis threshold, defined as the minimum value of goods below which customs authorities do not levy duties, is JD 100 (approx. USD 140). This amount is below the USD 200 threshold recommended by the International Chamber of Commerce (ICC).

It is reported that foreign applicants are permitted to register ".jo" and ".com.jo" domain names in their own name, provided that they appoint a local administrative contact. In addition, the domain name must correspond either to the applicant’s company name or to a registered trademark from any jurisdiction.

The government periodically blocks websites and social media platforms, sometimes without clear justification. Since 2015, authorities have routinely restricted access to messaging apps during the days when secondary school students sit for their national exams (Tawjihi). In December 2022, TikTok was blocked amid protests by truck drivers over fuel price increases; although described as a “temporary ban,” the app reportedly remained inaccessible until the end of 2024. In 2024, hundreds of news websites were reportedly blocked for failing to obtain a license. In August 2023, the LGBT+ dating app Grindr was also reportedly blocked and remained inaccessible through the end of 2024. Widely used VPN services—such as ExpressVPN, Proton VPN, NordVPN, and TunnelBear—were blocked shortly after the social media app Clubhouse became inaccessible in March 2021, and many of these VPNs remained inaccessible as of June 2024. VPNs that allow users to bypass censorship have been targeted repeatedly. According to the Telecommunications Regulatory Commission (TRC), by 2023 the total number of blocked websites and apps had reached 300, with several of these blocks reportedly enacted at the request of the Land Transport Regulatory Commission to restrict access to unlicensed rideshare apps.

Internet shutdowns are rare in Jordan, although they have occurred in the past. During 2024, authorities reportedly conducted internet shutdowns amid protests and continued their annual practice of disrupting access to messaging applications during high school exams.
In addition, the indicator "7.2.4 - Government Internet shut down in practice" of the V-Dem Dataset, which measures whether the government has the technical capacity to actively make internet service cease, thus interrupting domestic access to the internet or whether the government has decided to do so, has a score of 3 in Jordan for the year 2024. This corresponds to "Rarely but there have been a few occasions throughout the year when the government shut down domestic access to Internet."

According to Art. 3.2 of the Instructions Regarding Application Procedures and Criteria for Granting Individual and Classified Public Telecommunications Licenses, licenses will be granted to qualified applicants unless there are valid reasons not to do so. These reasons may include national security, safety concerns, technical limitations, scarce resources, and the potential for creating an anti-competitive market environment for public telecommunications services, as outlined in Art. 28 of the Telecommunications Law.
According to Art. 20 of the Telecommunications Law, the establishment, operation, and administration of public telecommunications networks and the provision of public telecommunications services are not permitted unless a license has been obtained from the Telecommunications Regulatory Commission (TRC). According to Art. 26, all those wishing to obtain a license shall be given the opportunity to submit their proposals or applications if they meet the conditions specified by the Commission. For this purpose, according to Art. 27, the following documents are needed to be enclosed with an application:
- Acceptable statements illustrating the technical and administrative ability of the applicant to provide the service;
- Acceptable statements illustrating the financial ability of the applicant and the funding sources of the project;
- Bases of pricing of the proposed services and the method of their calculation;
- Types of the proposed services, the geographical area to be covered, and the technology used in the service.

Jordan has appended the World Trade Organization (WTO) Telecom Reference Paper to its schedule of commitments.

It is reported that the Telecommunications Regulatory Commission (TRC), the executive authority for the supervision and administration of services in the telecommunications sector, is independent from the government in the decision-making process.

Art. 15 of the Personal Data Protection Law provides that any cross-border transaction of personal information must be transferred to a party that has a sufficient level of data protection. The level of protection afforded to a data recipient is equivalent to that imposed by Jordanian laws and regulations, except in the following cases: judicial cooperation is established under international conventions and treaties; international cooperation in the field of combating crimes; data exchange is essential for patient treatment; data exchange is related to epidemiological and health disasters or public health related to Jordan; the data subject has approved the transfer of data after being made aware that the level of protection outside the jurisdiction is not equivalent to the level imposed by Jordanian laws and regulations; and transfer of funds abroad.

Jordan has not joined any agreement with binding commitments to open transfers of data across borders.

Law No. 24 provides a comprehensive regime of data protection in Jordan. The provisions of the Law are applicable to any personal and sensitive information processing of natural persons, whether such data was collected or processed before or after the effectiveness of the Law within Jordan, and apply to controllers who are also based outside of Jordan. The Law also applies to both domestic and international data transfers. In addition, the Law outlines several rights for individuals, namely the right to be informed, to access and obtain held data by the data controller, to object and withdraw consent, to correct, amend, add or update data, to restrict data processing, to be forgotten, to ensure data is erased, and to data portability. Furthermore, the Law includes obligations regarding the notification of data infringements and breaches to individuals.

The Instructions of Anti-Money Laundering and Counter-Terrorist Financing For Electronic Payments and Money Transfer Companies No. 12/2018, issued under the Payment and Transfer of Money Regulation No. 111/2017, introduces a data retention requirement of five years for transaction data and system logs (Art. 13).

Art. 11.a of the Personal Data Protection Law provides that the controller shall be committed to appointing a DPO in the following instances:
- If the main business of the controller is the processing of personal data;
- They process sensitive personal data;
- They process the personal data of natural individuals who do not have legal capacity;
- Processing includes financial information;
- The responsible person transfers personal data outside Jordan;
- Any other case for which the Council decides to oblige the controller to appoint a DPO.
Pursuant to Art. 11.b.2 of the Personal Data Protection Law, one of the duties of the controller is to carry out a periodic assessment and evaluation of the database, data processing systems, and systems, preserving the security and safety of data. The controller must document the outcomes of such assessment, issue the necessary recommendations for protecting the data, and implement such recommendations alongside monitoring procedures adopted for protecting data and documenting compliance with the law and relevant legislation.