IraqCMC Framework Regulations for Digital Platforms and Services, data protection and localization conditions
In force since .
A cross border transfer rule binding private bodies.
As of .
What it requires
- If you operate a digital platform that serves users in Iraq and apply to the Communications and Media Commission for a license, commit to data protection and privacy measures that comply with Iraqi laws, including data localization where necessary.
- If you register with the Commission, provide an outline of your user data protection measures and your compliance with Iraqi laws.
- If you file a notification with the Commission, confirm that your platform complies with Iraq's basic data protection and content policies.
- Comply with Iraqi laws, regulations and governmental decrees on personal data protection and classification.
These lines are LexLint's reading of the law's text, as of .
What this law does
The Communications and Media Commission's Framework Regulations for Digital Platforms and Services apply to all digital platforms and service providers that provide access to digital services or content to users within Iraq. A platform applying for a license must commit to data protection and privacy measures that comply with Iraqi laws, including data localization where necessary. The Commission may in some cases require a licensed platform to set up a local entity.
A platform registering with the Commission must provide an outline of its user data protection measures and its compliance with Iraqi laws. A platform filing a notification must confirm that it complies with Iraq's basic data protection and content policies. Service providers must comply with Iraqi laws, regulations and governmental decrees on personal data protection and classification. The Regulations state that the Commission will publish a personal data protection law in due time.
The Regulations came into force on . Providers must obtain their regulatory tool within 12 months after the Regulations come into effect. The English and Arabic texts are each authoritative, with the Arabic version prevailing in a discrepancy.
When LexLint raises it
When your app profile says your app operates a social platform, operates an app store or deploys a chatbot.