💡 律咖编者按： 本文由律咖网社群读者 anemone 投稿分享。 为了方便大家阅读，律咖网编辑 JingJing（微信：lvga2015）对原文进行了细致的逻辑润色与合规性整理。希望能给正在 约旦 创业路上的你带来真实的参考。

I didn’t come to Jordan for cybersecurity.

I came because a client in Amman needed 300 units of tunnel reinforcement mesh equipment — the kind we make in Changsha. Simple enough. But six months in, I’m still waiting for the final payment. The contract was signed. The goods shipped. The customs cleared. And yet… the money hasn’t moved.

That’s when I started noticing the other things. The quiet rules. The unspoken systems. The ones that don’t show up in brochures or government websites.

Like biometrics.

I found out — too late — that if you’re staying longer than 14 days, you’re required to report to the local police station and give fingerprints and iris scans. No form. No appointment system. Just walk in, stand in line, wait. And if you don’t? Fines. Not huge. But enough to make you nervous. Especially when you’re already stressed about cash flow.

I didn’t know this until a local agent mentioned it over coffee. “Oh, you haven’t done it yet?” he said, like it was obvious. I felt stupid. I’d read the embassy’s website. I’d checked the Jordanian Ministry of Interior’s English page. Nothing about biometrics. Not even a footnote.

That’s the first thing I learned: information asymmetry isn’t a bug — it’s the default.

I work in industrial equipment. My background is biology. I didn’t study IT law. But here, in Jordan, “information security” isn’t just about firewalls or encryption. It’s about who you are, where you go, what you say, and whether your phone gets scanned at the border.

I spoke to a German engineer who’s been here five years. He runs a small solar project. He told me: “We don’t use cloud storage. Not even Google Drive. We use local servers. Because if the government asks for logs, they can get them — fast. And if they don’t like what they see, you don’t get your visa renewed.”

He didn’t say it with fear. He said it with resignation.

That’s when I started thinking differently.

In China, we have the Great Firewall. Transparent, heavy, predictable. In Jordan? There’s no public law called “Information Security Management System.” Not like ISO/IEC 27001. No checklist you can download. But there are practices. Silent ones.

You avoid WhatsApp for business. You don’t email sensitive documents from public Wi-Fi. You don’t store client lists on your phone. You use encrypted USB drives. You keep paper backups. You don’t ask why. You just do it.

I asked a local lawyer — not a big firm, just a guy with a small office near Abdoun — if there was any formal requirement for data handling. He looked at me, paused, then said: “We don’t have a law that says ‘you must do X.’ But we have a culture that says ‘if you do Y, you might disappear from the system.’”

That’s not a legal opinion. It’s a survival tip.

I spent two weeks trying to map out what “compliance” meant here. I talked to three accountants, two expat entrepreneurs, and one retired Jordanian police officer who now runs a coffee shop. None of them gave me the same answer.

One said: “If you’re not a citizen, you’re not covered by privacy laws.”
Another: “The Ministry of Transport logs all vehicle registrations. They don’t tell you, but they do.”
The third: “If your company name has ‘China’ in it, they watch you differently.”

I didn’t get clarity. I got layers.

Here’s what I’ve learned, slowly, quietly, painfully:

  1. There is no central compliance portal.
    You can’t find a single website listing all requirements for foreign-owned businesses. Some rules are in the Ministry of Industry. Some in the Ministry of Interior. Some in the Central Bank. Some are just whispered in expat groups.

  2. Biometrics are real — and non-negotiable.
    If you’re staying more than two weeks, go to the police station. Bring your passport. Bring your visa. Bring cash for the fine if you’re late. It’s not optional. It’s not a suggestion. It’s a silent gate.

  3. Data is not yours to control.
    Assume any digital trace — emails, cloud files, phone location — can be accessed. Use local storage. Use encrypted devices. Use paper when you can. Don’t assume encryption protects you. It protects you from amateurs. Not from the state.

  4. Your nationality matters more than you think.
    I’m Chinese. I’ve been asked twice if I “work with Huawei.” I’ve been told my company name “sounds like a tech firm.” I’ve been asked if I “have access to the Belt and Road data.” I never answered. I just smiled and changed the subject.

I used to think compliance was about forms and audits. Here, it’s about presence. About visibility. About not being noticed.

I’m not a security expert. I don’t know if Jordan has an ISO 27001 equivalent. I don’t know if they follow NIST. I don’t even know if they have a cybersecurity agency.

But I know this: when you’re trying to get paid for equipment you shipped, and you’re also trying to avoid being flagged for “suspicious digital behavior,” you start to realize — the real compliance isn’t written. It’s lived.

I spent three hours yesterday standing in line at the Amman police station, waiting to give my fingerprints. My kid had a parent-teacher meeting back in Changsha. I missed it. Again.

I thought about how much time I’ve lost — not to business, but to bureaucracy. To uncertainty. To the quiet, invisible rules that don’t appear in contracts or invoices.

I’m not here to build a tech company. I’m here to sell steel mesh. But in Jordan, even steel mesh has a digital shadow.

❓ FAQ: What Should You Actually Do?

Q1: Do I need to register biometric data if I’m in Jordan for a business trip?

A: If your stay exceeds 14 days, yes — it’s currently required.

  • Step: Visit your nearest police station (not immigration).
  • Path: Bring your passport, visa, and proof of address (hotel receipt or rental contract).
  • Key points:
    • No appointment needed. Go early — lines get long.
    • Fingerprint and iris scan are mandatory.
    • If you’re unsure, ask the receptionist: “Is this required for business visitors?”
    • Do not delay — fines are typically 20–50 JOD, but can delay visa renewal.
    • Official channel: Ministry of Interior, Directorate of Public Security (DPS).

Q2: Are there formal “information security” laws for foreign businesses?

A: There is no publicly published ISO-style standard for foreign companies.

  • Step: Assume all digital activity is monitored.
  • Path: Use local servers or encrypted USB drives. Avoid public cloud services for sensitive data.
  • Key points:
    • Jordan has no public cybersecurity law for SMEs.
    • But the National Cybersecurity Center (NCC) exists — it’s not transparent.
    • If your business handles personal data (client lists, payment info), treat it as if it’s governed by GDPR — even if it’s not.
    • Ask a local accountant: “Do we need to keep data in Jordan?” Often, the answer is: “We don’t know — but we don’t take risks.”

Q3: Can I use WhatsApp or WeChat for business communication?

A: Many expats do — but quietly.

  • Step: Avoid discussing contracts, payments, or logistics over encrypted apps.
  • Path: Use email with end-to-end encryption (ProtonMail, Tutanota) for formal docs. Use local SIM cards for calls.
  • Key points:
    • WhatsApp is widely used — but metadata is collected.
    • WeChat is known to be monitored by Chinese authorities — and Jordan may share data with them.
    • If you must use messaging, keep it light. No project names. No bank details. No employee lists.
    • The rule of thumb: If you wouldn’t say it in front of a police officer, don’t write it.

I used to think compliance was about getting things right.

Now I think it’s about getting through.

I’m not trying to tell you how to “succeed” in Jordan. I’m just sharing what I’ve stumbled into — the quiet pressures, the invisible checkpoints, the moments when you realize you’re not just running a business, you’re navigating a system that doesn’t want to explain itself.

I miss my kid’s school meetings. I’m tired of chasing payments. I still don’t know if I’ll break even on this project.

But I’m still here.

Because sometimes, the only way to understand a country is to live its unspoken rules — one fingerprint scan, one late-night email, one silent conversation with a stranger at a coffee shop, at a time.

If you’re in Jordan — or planning to be — and you’ve had similar moments, I’d like to hear them. Not because I have answers. But because I’m tired of walking blindfolded.

You’re not alone.

If you want to talk about this — about compliance, about time, about the loneliness of being a foreign entrepreneur trying to do the right thing — feel free to reach out to JingJing at Lvga.com. She listens. She doesn’t sell. She just helps people connect.

🔗 延伸阅读

🔸 US Embassy in Jordan issues security alert, warns ‘continued missiles, drones, or rockets’ expected
🗞️ 来源: Hindustan Times – 📅 2026-03-02
🔗 阅读原文

🔸 I booked myself for a vasectomy at 25 but we still had 3rd accidental pregnancy, it put me off my KFC, says Jordan Banjo
🗞️ 来源: The Sun – 📅 2026-03-02
🔗 阅读原文

🔸 Actor Awards 2026: Μεγάλοι νικητές Sinners και Michael B. Jordan – Όσα έγιναν στη λαμπερή τελετή πριν από τα Oscars
🗞️ 来源: Zougla – 📅 2026-03-02
🔗 阅读原文

📌 免责声明

请知悉：律咖网（Lvga.com）是跨境创业公开信息与内容分享平台，不提供法律、税务、会计或合规服务。
本文内容基于公开资料，并由人工编辑与 AI 工具协助整理，仅供信息参考之用，不构成任何法律、投资、移民或商业决策建议。
政策可能随时间变化，请以官方渠道与当地持牌专业人士意见为准。
如内容有需要修订之处，欢迎随时与我联系。