QatarPersonal Data Privacy Protection Law, rights of the individual
In force.
A data subject rights rule binding public and private bodies.
What it requires
- An app that is a Controller of the personal data of an individual in Qatar, including a voiceprint or faceprint, must let that individual withdraw consent at any time, object to processing that is not necessary for the purposes of collection, request erasure once those purposes cease, and request corrections accompanied by proof of accuracy.
- A Controller must let an individual access and review their personal data, tell them that it is processed and for what purposes, and give them a copy for no more than the service charge.
These lines are LexLint's reading of the law's text.
What this law does
Article 5 of the Personal Data Privacy Protection Law lets an Individual at any time withdraw consent to the processing of their Personal Data, object to processing that is not necessary for the purposes of collection, ask for omission or erasure when the purpose of the processing has ceased or the justifications for keeping the Personal Data cease to exist, and ask for corrections accompanied by proof of accuracy.
Article 6 lets an Individual access and review their Personal Data against any Controller, including to be notified of the processing and its purposes and to obtain a copy after paying no more than the service charge. Article 7 leaves the controls and procedures for exercising these rights to a decision of the Minister, and Article 19 exempts a Controller from Articles 5 (items 1 to 3) and 6 in listed cases such as a legal obligation or an order of a competent court.
When LexLint raises it
When your app profile says your app processes personal data.
Back to the example · Lint your app
Page updated .