Support Centre

You have out of 5 free articles left for the month

Signup for a trial to access unlimited content.

Start Trial

Continue reading on DataGuidance with:

Free Member

Limited Articles

Create an account to continue accessing select articles, resources, and guidance notes.

Free Trial

Unlimited Access

Start your free trial to access unlimited articles, resources, guidance notes, and workspaces.

Qatar Financial Centre: Data Protection Officer Appointment

your_photo / Essentials collection / istockphoto.com

1. Governing Texts

1.1. Legislation

  • QFC Data Protection Regulations 2005 (access available here) ('the 2005 Regulations')
  • Data Protection Rules 2005 (access available here) ('the 2005 Rules')

The above will be collectively referred to as 'the 2005 Legislation'.

Notably, the 2005 Legislation has been amended following a public consultation in 2021, and will be replaced by the 2021 Data Protection Regulations and 2021 Data Protection Rules (collectively 'the 2021 Legislation') (access available here).

The 2021 Regulations and 2021 Rules will repeal the 2005 Rule and the 2005 Regulations 180 days after its date of issuance, i.e. 21 May 2022.

1.2. Regulatory authority guidance

The Qatar Financial Centre Authority ('QFC Regulatory Authority') and the Data Protection Office (newly established by the 2021 Legislation) have not issued any guidance.

2. Definitions

Data protection officer: There is no definition of 'data protection officer' ('DPO') under the 2005 Legislation nor the 2021 Legislation.

Data controller: Any person in the QFC who alone or jointly with others determines the purposes and means of the processing of personal data (Article 26 of the 2005 Regulations).

Data processor: Any person who processes personal data on behalf of a data controller (Article 26 of the 2005 Regulations).

3. DPO Appointment

3.1. Required

There is no requirement to appoint a DPO under the Regulations nor the Rules.

3.2. Recommended

Not applicable.

3.3. Beneficial regime

Not applicable.

4. DPO Specified

4.1. Role

Not applicable.

4.2. Professional qualifications

Not applicable.

5. Additional Requirements

5.1. Notification

Not applicable.

5.2. Location

Not applicable.

5.3. Other

Not applicable.

6. Penalties

Not applicable.


Authored by OneTrust DataGuidance

DataGuidance's Privacy Analysts carry out research regarding global privacy
developments, and liaise with a network of lawyers, authorities and professionals to gain
insight into current trends. The Analyst Team work closely with clients to direct their
research for the production of topic-specific Charts.