Continue reading on DataGuidance with:
Free Member
Limited ArticlesCreate an account to continue accessing select articles, resources, and guidance notes.
Already have an account? Log in
Qatar: QFC issues 2021 Data Protection Regulations
The Qatar Financial Centre ('QFC') issued on, 21 December 2021, the new QFC Data Protection Regulations ('the 2021 Regulations'), following a revision of the 2005 Data Protection Regulations and the 2005 Data Protection Rules ('the 2005 Legislation'), and a recent public consultation on one the same, which ended on 16 September 2021. In particular, the 2021 Regulations aim to clarify some of the existing provisions under the 2005 Legislation and introduce new provisions in line with global developments in data protection laws, including:
- the establishment of a new Data Protection Office and the Data Protection Commissioner;
- data processing principles including, among others, purpose specification, data minimisation, and storage limitation;
- clarifications of the requirement for consent;
- introduction of data subjects' right to data portability, right not to be subject to automated decision-making, and right to effective judicial remedy enforceable against controllers and processors;
- requirement to implement appropriate technical and organisational measures on controllers; and
- requirement to conduct Data Protection Impact Assessments ('DPIAs') in certain circumstances.
Notably, the 2021 Regulations will come into effect 180 days from the date of their issuance, i.e. 21 May 2022.
You can read the 2021 Regulations here.