Is a lender, in Qatar

Decision No. 5 of 2008 Establishing the Qatar Credit Bureau, Arts. 3 and 5-9, and Instructions to Banks Part IX, items 5 and 6 · Read the law's page

• If you are a bank, a financial institution or a company licensed to grant facilities, forward or installment sales or Ijara, provide the Qatar Credit Bureau with credit information or any necessary data according to QCB policies, and report on the status of all credit facilities and related returned cheques and keep them updated.
• If you are a bank, obtain a credit report on a customer from the Qatar Credit Bureau before entering into any credit relation or renewing or rescheduling a facility, and update the credit reports of all your customers via the Bureau every three months.
• If you handle credit information at a bank, a financial institution or the Bureau, keep the data private and secret and do not release it, even after your service ends, except where the law authorizes release.
• Do not exchange credit data between users except through the Qatar Credit Bureau, do not use it to influence a customer's reputation or goodwill or to commit fraud, and do not use it in any publication or marketing material.

Qatar Central Bank Artificial Intelligence Guideline (2024) · Read the law's page

• A QCB-regulated financial entity must obtain QCB approval before launching a new AI system as a provider or making a material modification to one, and before signing a High-Risk AI purchase, licensing, or outsourcing agreement.for a financial business
• A QCB-regulated entity deploying a High-Risk AI system must maintain an AI system register, adopt an AI governance policy, conduct risk and bias assessments, and provide human oversight of the system's decisions.when it serves a financial business
• A QCB-regulated entity must give a customer a mechanism to raise inquiries about an AI-driven decision affecting them and request a review of it.when it serves a financial business

Qatar Central Bank Technology Risk Instructions for Financial Services Operators (2022), Section 1.4 · Read the law's page

• This binds an exchange house, investment company, finance house or relevant broker operating in Qatar and regulated by the Qatar Central Bank (QCB); a firm that declares it is a payment provider, a lender or a securities firm is reached (Introduction and Scope).
• Develop and maintain an information security incident management policy and plan with various levels of escalation and response (Section 1.4.1).
• Notify QCB and the National Cyber Security Agency immediately, based on the severity of the incident, and notify the Ministry of Interior in the case of a cybercrime (Section 1.4.5).
• Exercise and simulate incident response plans periodically for critical business processes and key risks (Section 1.4.2).

Qatar Central Bank Technology Risk Instructions for Financial Services Operators (2022), Sections 1 to 3 · Read the law's page

• This binds an exchange house, investment company, finance house or relevant broker operating in Qatar and regulated by the Qatar Central Bank (QCB); a firm that declares it is a payment provider, a lender or a securities firm is reached (Introduction and Scope).
• Have the board and executive management ensure an Information Security program is in place, and define and establish a risk management framework to manage technology risks (Sections 1.1.2 and 1.2.1).
• Comply with the requirements defined in the Instructions, and report compliance at least on an annual basis and upon QCB's request (Sections 3.1.1 and 3.1.2).