Support Centre

Qatar Financial Centre

Summary

Law: Data Protection Regulations (access available here) (the 2021 Regulations), the Data Protection Rules (access available here) (the 2021 Rules), the QFC Data Protection Regulations 2005 (access available here) (the Regulations), and the Data Protection Rules 2005 (access available here) (the Rules)

Regulator: Data Protection Office (not yet operational) and the Qatar Financial Centre Authority (QFC Regulatory Authority) for the purposes of the 2005 Rules and Regulations

Summary: In light of global developments in data protection, and 16 years after the introduction of the QFC Data Protection Regulations 2005 (access available here) (the Regulations) and the Data Protection Rules 2005 (access available here) (the Rules), the QFC Regulatory Authority proposed various changes to each of the same. Following a public consultation on the proposed changes which ended in September 2021, the Data Protection Regulations (access available here) (the 2021 Regulations) and the Data Protection Rules (access available here) (the 2021 Rules) were issued on December 21, 2021, by the Qatar Financial Centre (QFC) and came into force on June 19, 2022. The 2021 Regulations and the 2021 Rules repeal the Regulations and the Rules of 2005.

The 2021 Regulations present significant changes to the law, including the establishment of a new Data Protection Office, additional data subject rights, including the right to data portability and the right not to be subject to automated decision-making, a requirement to implement appropriate technical and organizational measures on controllers, and a requirement to conduct Data Protection Impact Assessments (DPIAs) in certain circumstances. The 2021 Rules add to controllers' transparency obligations towards data subjects and correspond to and supplement some of the changes introduced in the 2021 Regulations.

The QFC is a global business and financial center with an independent legal and regulatory infrastructure. It was established by the Qatar Financial Centre Law (Law No. (7) of 2005) (the QFC Law) which also granted the QFC Authority with the power to produce the Rules and Regulations in 2005.

News

Insights

December 2023

Qatar: An overview of the developments on the QFC Data Protection Regulations and Rules

The Qatar Financial Centre (QFC) as an independent regulatory jurisdiction has undergone a transformative journey to safeguard personal data in the developing landscape of finance and technology sectors over the years. In the initial regulations that were enacted in 2005, the scope was relatively broad, but this has since been refined in the 2021 amendments that came into force on June 19, 2022 (New DPR).

The amendments in the New DPR aim to bring the existing Data Protection Regulations (the 2021 Regulations) to the standards of the General Data Protection Regulations (GDPR), which ultimately obliges businesses operating from the QFC to be more diligent in their data compliance practices. The New DPR also ensures proper monitoring and regulation of QFC firms in the context of data protection. Dorina Drowniak, from Dentons, reviews the most recent amendments to the 2021 Regulations and how firms can ensure they stay compliant.  

March 2022

Qatar: QFC updates its data protection law in line with the GDPR

The Qatar Financial Centre ('QFC'), a financial services free zone in Doha in Qatar, issued its updated Data Protection Regulations and Rules in December 2021, which align the QFC with international data protection laws, such as the European General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR'). Dino Wilkinson and Masha Ooijevaar, Partner and Associate respectively at Clyde & Co, discuss the updated data protection law in this article.

February 2022

Qatar Financial Centre: Data Protection Officer Appointment

February 2022

Qatar Financial Centre: Data Processing Notification

January 2022

Qatar: QFC Data Protection Regulations and Rules 2021 – What you need to know

The Qatar Financial Centre ('QFC') is a global business and financial centre with an independent legal and regulatory infrastructure. It was established by the Qatar Financial Centre Law (Law No. (7) of 2005) ('the QFC Law'), which also provided the QFC Authority ('QFCA') with the power to produce the Data Protection Regulations and the Rules that govern data protection law in the QFC today.

Marking 16 years since the introduction of the QFC's 2005 Data Protection Regulations ('the Regulations') and 2005 Data Protection Rules ('the Rules') (collectively 'the 2005 Legislation'), the QFCA has reviewed each of the Regulations and Rules in light of global developments in data protection law and proposed various changes to the same. Following said review, the QFCA launched a public consultation on the proposed changes for a period, ending on 16 September 2021. On 21 December 2021, the 2021 Data Protection Regulations ('the 2021 Regulations') and the 2021 Data Protection Rules ('the 2021 Rules') were issued by the QFC, adding to, and introducing new data protection provisions in the QFC.

With regards to implementation, the commencement date of the 2021 Regulations and the 2021 Rules is 180 days from the date of their issuance (i.e. 21 May 2022) as per Article 3 of the 2021 Regulations. Notably, the 2021 Regulations and the 2021 Rules will come into force on the same date, 21 May 2022, at which point the 2005 Legislation will be repealed (Article 3 of the 2021 Regulations).

This Insight article highlights the main changes which the 2021 Regulations bring to the QFC's data protection regime.

September 2021

QFC: Proposed changes to QFC's 2005 Data Protection Regulations and Rules

The Qatar Financial Centre ('QFC') is a global business and financial centre with an independent legal and regulatory infrastructure. It was established by the Qatar Financial Centre Law (Law No. (7) of 2005) ('the QFC Law'), which also provided the QFC Authority ('QFCA') with the power to produce the Data Protection Regulations and the Rules that govern data protection law in the QFC today. About 16 years since the introduction of the QFC's 2005 Regulations ('the Regulations') and 2005 Data Protection Rules ('the Rules'), the QFCA has reviewed each of the regulations and rules in light of global developments in data protection law, and has proposed various changes to each of the same. Moreover, the QFCA announced, on 18 August 2021, its launch of a public consultation on the proposed changes, which ended on 16 September 2021. In this regard, the QFCA noted that it may adopt, in whole or in part, the changes outlined in the consultation paper or may amend the changes in light of the comments received. Notably, the results of the consultation and final draft of the changes have not yet been released. This Insight summarises the proposed changes introduced by the QFCA review and outlines the new provisions that organisations may have to consider in the event that the proposed changes are adopted.

Company

Our Policies

Your Rights

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
© OneTrust, LLC. All Rights Reserved.
The materials herein are for informational purposes only and do not constitute legal advice.