Personal Data Privacy Protection Law
HH the Emir Sheikh Tamim Bin Hamad Al-Thani on November 13th, 2016 issued the 13th Law of the year concerning the protection of personal data. This law included provisions to ensure the protection of individuals rights with respect to privacy and that of their personal data.
The law mandates an increased rigor in the procedures that businesses employ to process personal data and does not apply to personal data processed by individuals privately or within a family context, or to any personal data gathered for official surveys and statistics.
In addition supporting individuals rights to privacy and supporting the protection of personal data through more careful processing of digital information, the law also ensures the competency of data processors by introducing requirements for organizational training and for proactively implementing precautions to protect personal data from loss, damage, modification, disclosure or unauthorized access.
The law also restricts how organizations may process personal information or how they may perform direct marketing activities and requires explicit consent from individuals prior to undertaking such activities. In instances where services are provided to minors, or the personal data of children is processed, organizations must clearly outline the scope of the data processing operation and obtain consent from a parent (or legal guardian).
The National Cyber Governance and Assurance Affairs, a division of the National Cyber Security Agency (NCSA), will perform the duties of the Competent Authority within the context of supervising the processing of personal data within the State of Qatar. Through this role we shall promote good practice and provide information to individuals and organizations to support the careful and considered processing of personal data, as well as regulate personal data processing activities and to arbitrate grievances or concerns with data processors.
In alignment with privacy regulators across the world, It is our goal to ensure the continuing respect and protection of individual’s rights to privacy and their personal data.