Bahrain’s Personal Data Protection Law (Law No. 30 of 2018) comes into force today, introducing the Kingdom’s first comprehensive data protection law, one year after it was issued.
Key points
- Security measures are required.
- Prior notification or authorisation is needed for certain processing.
- Transfers are restricted to approved countries.
- A Personal Data Protection Authority oversees compliance.
- Sensitive personal data is subject to additional conditions.
UK organisations with Bahraini operations, customers or employees should review their compliance, particularly the restrictions on transferring personal data out of Bahrain.
Source: Bahrain Law No. 30 of 2018 on Personal Data Protection (Personal Data Protection Authority)
Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.
