Qatar Financial Centre. Comprehensive data protection. Regulations (free zone)
QFC DPRQFC Data Protection Regulations and Data Protection Rules
In force
Partly verified
Low confidence.DLA Piper still cites 2005 instruments updated Dec 2023; existence of a distinct '2021 Regulations' not verified this session.
§1Summary
- Synopsis
GDPR-aligned data protection rules for entities licensed in the Qatar Financial Centre, covering lawful processing, rights, accountability, breach notification and transfers.
- Key themes
- Unique features
Permits from the Data Protection Office may be needed for sensitive data processing and transfers to non-adequate jurisdictions.
- SaaS relevance
SaaS providers processing for QFC firms must support breach notice and transfer safeguards.
§2Obligations
- Extraterritorial
- Limited
- Breach notification
- DPO (regulator) without undue delay, ≤72h where possible
- DPO
- No
- Cross-border transfers
- Adequacy list / safeguards / regulator permit / derogations
- Maximum penalty
- Not specified in sources
§3Dates
- Key dates
- Adopted
- In force
- Original QFC Regulation No. 6 of 2005; replaced by 2021 Regulations and Rules; updated 6 Dec 2023
§4Text and authority
- Text
- Authoritative text qfc.qa
- Authority
- QFC Data Protection Office
§5Where it applies
- Domestic law of
- Qatar Financial Centre
§6Sources and verification
- Verification
Low confidence.
Partly verified
Low confidence.DLA Piper still cites 2005 instruments updated Dec 2023; existence of a distinct '2021 Regulations' not verified this session.