Don’t do SECURITY. Do business SECURELY.

Qatar issues personal data privacy protection law

Qatar becomes the first GCC state to issue a general data protection law, setting security, breach and transfer rules.

Qatar today issues Law No. 13 of 2016 on Protecting Personal Data Privacy, the first general data protection law in the Gulf Cooperation Council.

Key points

  • Appropriate administrative, technical and financial precautions are required.
  • Breaches that may cause serious damage must be notified.
  • Cross-border transfers are restricted.
  • Special rules apply to sensitive data and children.

Organisations had six months after publication in the Official Gazette to comply. UK organisations operating in Qatar, or processing data about individuals there, should check transfer arrangements and breach processes. Entities in the Qatar Financial Centre are covered by separate GDPR-style regulations.

Source: Law No. 13 of 2016 on Protecting Personal Data Privacy (Al Meezan, Qatar)

Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.

More insights