Qatar Central Bank Artificial Intelligence Guideline

Qatar Central Bank Artificial Intelligence Guideline (2024)

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force.

An AI sector rules rule binding private bodies.

As of 6 September 2026.

What it requires

A QCB-regulated financial entity must obtain QCB approval before launching a new AI system as a provider or making a material modification to one, and before signing a High-Risk AI purchase, licensing, or outsourcing agreement.
A QCB-regulated entity deploying a High-Risk AI system must maintain an AI system register, adopt an AI governance policy, conduct risk and bias assessments, and provide human oversight of the system's decisions.
A QCB-regulated entity must give a customer a mechanism to raise inquiries about an AI-driven decision affecting them and request a review of it.

What it reaches

How the hook was established

express

What makes it apply

Operator establishment

What it makes you log

Who may demand the log

Regulator

What the log must hold

System identity, Decision basis, Output reference, Data lineage

Logging duty

Section 16.1's mandatory ('must') framework for a High-Risk AI system requires, at 16.1.7, systems and procedures for record keeping of all relevant documentation and information. Section 19.2 additionally asks (using 'should' rather than 'must', softer than most of this Guideline's mandatory duties) that an Entity maintain auditable records of its experience with AI Systems, including establishing audit logs and maintaining traceability of decisions and outcomes, design documentation, records of model versions and code, and archiving the original data sets used to develop, retrain, or calibrate a model.

Kind: Explicit
As of: 22 September 2026
Provision: Sections 16.1.7 and 19.2-19.3
Trigger: high_risk_systems

Who checks it

Audit expectation

periodic

Who audits it

Self

Where the report goes

Filed with regulator, Produced on request

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

The Guideline covers the use of AI by a QCB-regulated entity and imposes mandatory duties, using 'must' throughout, rather than voluntary recommendations. An entity must receive QCB approval before launching a new AI system as a provider, before a material modification to one, and before signing a High-Risk AI purchase, licensing, or outsourcing agreement.

A regulated entity must maintain an AI system register and a defined AI strategy, adopt an AI governance policy, conduct risk assessments including bias testing for High-Risk AI, and provide human oversight of AI-driven decisions. A regulated entity must give a customer a mechanism to raise inquiries about an AI-driven decision and request a review of it, and must handle any resulting complaint through standard customer-complaint processes.

The Guideline states that, alongside the Qatar Central Bank Law, an entity must also comply with named secondary regulations, including the Personal Data Privacy Protection Law (Law No. 13 of 2016) where personal data is involved. The Guideline's own commencement clause names it 'the Artificial Intelligence Guideline for 2024' without a further stated calendar day for its entry into force.

When LexLint raises it

high_risk_decisions
provides_financial_services

Read the law

Qatar Central Bank, official guideline text

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app