The Protection of Privacy Law, 5741-1981 prohibits the use of personal data or its delivery to another not for the purpose for which it was provided; this presumably does not apply to de-identified data.