Data privacy
Qatar
On November 2016, Qatar issued a stand-alone data protection law No. 13 of 2016 on Protection of Personal Data Privacy (Data Protection Law). Businesses must take action to protect the privacy of personal data or risk fines of up to QAR 5 million. Key features of the law include:
- Personal data is defined as data relating to an individual whose identity is determined, or able to be reasonably determined, either through the data or through linking this data with other data
- The Data Protection Law applies to personal data when it is processed electronically, or when it is accessed or collected or extracted otherwise in preparation for its electronic processing, or when it is processed in a traditional and electronic way together
- The processing of personal data will be regulated in a way which bears similarities with existing data protection regulations elsewhere in the world
- Particular protection will be provided to certain types of personal data, such as data relevant to children, to physical and mental health and to crimes referred to as sensitive personal data
- For example, parental consent will be required in connection with the online collection and processing of the personal data of children
- Businesses will need to implement suitable measures, including training, to protect personal data from loss, damage, modification, disclosure or illegal access
- Direct marketing will require the prior consent of the intended recipient and, amongst other requirements, the relevant communication must include a means by which the recipient may opt-out of future communications
This law may sit alongside the QFC data protection regulations and rules. It is also important to note that as per the Qatar Penal Code it is advisable to seek prior written consent to the processing of personal data from the employee to the extent necessary to overcome the various privacy protections.
Download PDF