Support Centre

You have out of 5 free articles left for the month

Signup for a trial to access unlimited content.

Start Trial

Continue reading on DataGuidance with:

Free Member

Limited Articles

Create an account to continue accessing select articles, resources, and guidance notes.

Free Trial

Unlimited Access

Start your free trial to access unlimited articles, resources, guidance notes, and workspaces.

Bahrain: Ministry publishes new executive decisions supplementing the data protection law  

The Ministry of Justice, Islamic Affairs and Endowments ('the Ministry') issued, on 17 March 2022, ten executive decisions supplementing the Personal Data Protection Law No. (30) of 2018 ('the Law'). In particular, the Ministry has published the following executive decisions: 

  • the decision on the rights of data subjects ('the Data Subject Rights Decision');
  • the decision regarding the procedures and rules for submitting complaints about violations of the provisions of the Law ('the Complaints Decision'); 
  • the decision regarding the transfer of personal data outside the Kingdom of Bahrain ('the Transfers Decision');
  • the decision on the conditions for creating publicly accessible records of personal data ('the Publicly Accessible Records Decision');
  • the decision to determine the registration fees in the Data Protection Monitors Register, registration renewal fees, and cases of exemption and refunds ('the Registration Fees Decision');
  • the decision on data protection monitors ('the Data Protection Monitors Decision');
  • the decision on the requirements to be met in technical and organisational measures to ensure data protection ('the Technical and Organisational Measures Decision');
  • the decision establishing rules and procedures for the processing of sensitive personal data ('the Sensitive Personal Data Decision');
  • the decision specifying controls and guarantees for maintaining the confidentiality of data related to filing a criminal case and the judgments issues therein ('the Criminal Case Confidentiality Decision'); and
  • the decision on the rules and procedures for submitting a notification to the Personal Data Protection Authority, requesting prior authorisation for processing and deciding on it ('the Notification Decision').

You can read the Data Subject Rights Decision here, the Complaints Decision here, the Transfers Decision here, the Publicly Accessible Records Decision here, the Registration Fees Decision here, the Data Protection Monitors Decision here, the Technical and Organisational Measures Decision here, the Sensitive Personal Data Decision here, the Criminal Case Confidentiality Decision here, and the Notification Decision here, all only available in Arabic.