Support Centre

You have out of 5 free articles left for the month

Signup for a trial to access unlimited content.

Start Trial

Continue reading on DataGuidance with:

Free Member

Limited Articles

Create an account to continue accessing select articles, resources, and guidance notes.

Free Trial

Unlimited Access

Start your free trial to access unlimited articles, resources, guidance notes, and workspaces.

Qatar: QFC issues 2021 Data Protection Regulations

The Qatar Financial Centre ('QFC') issued on, 21 December 2021, the new QFC Data Protection Regulations ('the 2021 Regulations'), following a revision of the 2005 Data Protection Regulations and the 2005 Data Protection Rules ('the 2005 Legislation'), and a recent public consultation on one the same, which ended on 16 September 2021. In particular, the 2021 Regulations aim to clarify some of the existing provisions under the 2005 Legislation and introduce new provisions in line with global developments in data protection laws, including:

  • the establishment of a new Data Protection Office and the Data Protection Commissioner; 
  • data processing principles including, among others, purpose specification, data minimisation, and storage limitation;
  • clarifications of the requirement for consent;
  • introduction of data subjects' right to data portability, right not to be subject to automated decision-making, and right to effective judicial remedy enforceable against controllers and processors;
  • requirement to implement appropriate technical and organisational measures on controllers; and
  • requirement to conduct Data Protection Impact Assessments ('DPIAs') in certain circumstances.

Notably, the 2021 Regulations will come into effect 180 days from the date of their issuance, i.e. 21 May 2022.

You can read the 2021 Regulations here