Qatar: Law No. 13 of 2016 (PDPPL)

Qatar's PDPPL mandates transparency and 'Privacy by Design'. It prohibits unsolicited direct marketing without consent. Stricter rules apply to sensit...

Non-Compliance Penalties

Up to QAR 5,000,000

Effective Date

2017 (AI Guidelines updated for 2026)

Regulatory Authority

National Cyber Security Agency (NCSA)

Residency Rule

Cross-border flows restricted. Special nature data requires prior permission.

Executive Summary

Qatar's PDPPL mandates transparency and 'Privacy by Design'. It prohibits unsolicited direct marketing without consent. Stricter rules apply to sensitive data (health, children), requiring NCSA permission.

View Official Legal Text