Is a bank, in Qatar

Decision No. 5 of 2008 Establishing the Qatar Credit Bureau, Arts. 3 and 5-9, and Instructions to Banks Part IX, items 5 and 6 · Read the law's page

• If you are a bank, a financial institution or a company licensed to grant facilities, forward or installment sales or Ijara, provide the Qatar Credit Bureau with credit information or any necessary data according to QCB policies, and report on the status of all credit facilities and related returned cheques and keep them updated.
• If you are a bank, obtain a credit report on a customer from the Qatar Credit Bureau before entering into any credit relation or renewing or rescheduling a facility, and update the credit reports of all your customers via the Bureau every three months.
• If you handle credit information at a bank, a financial institution or the Bureau, keep the data private and secret and do not release it, even after your service ends, except where the law authorizes release.
• Do not exchange credit data between users except through the Qatar Credit Bureau, do not use it to influence a customer's reputation or goodwill or to commit fraud, and do not use it in any publication or marketing material.

Qatar Central Bank Artificial Intelligence Guideline (2024) · Read the law's page

• A QCB-regulated financial entity must obtain QCB approval before launching a new AI system as a provider or making a material modification to one, and before signing a High-Risk AI purchase, licensing, or outsourcing agreement.for a financial business
• A QCB-regulated entity deploying a High-Risk AI system must maintain an AI system register, adopt an AI governance policy, conduct risk and bias assessments, and provide human oversight of the system's decisions.when it serves a financial business
• A QCB-regulated entity must give a customer a mechanism to raise inquiries about an AI-driven decision affecting them and request a review of it.when it serves a financial business

Qatar Central Bank Technology Risks Regulation for Banks (January 2018), Section 8.2 · Read the law's page

• This binds a bank licensed in Qatar and regulated by the Qatar Central Bank (QCB); a bank that declares it is a bank is reached (Section II).
• Establish an incident management framework and an Incident Management Policy and procedures to protect, detect, evaluate and respond to cyber incidents (Section 8.2.1).
• Report every critical incident to QCB and the relevant governmental authorities within 1 hour of identifying it (Section 8.2.10).
• Test the predetermined escalation and response plan for security incidents on an annual basis (Section 8.2.11).

Qatar Central Bank Technology Risks Regulation for Banks (January 2018), Sections 1 to 9 · Read the law's page

• This binds a bank licensed in Qatar and regulated by the Qatar Central Bank (QCB); a bank that declares it is a bank is reached (Section II).
• Have the board and senior management oversee technology risks, and establish IT policies, standards and procedures to manage them (Section 1.2.1).
• Have the information systems (infrastructure, people and processes) audited at least once every year, or whenever a change may affect their security (Section 3.1.3).
• Submit a compliance report to QCB on an annual basis at a minimum, and obtain QCB's prior approval before entering into an outsourcing agreement (Sections 7.1.1 and 9.10.1.2).