QatarQFC Data Protection Regulations 2021, sensitive personal data
QFC Data Protection Regulations 2021, Art. 12
In force.
A sensitive categories rule binding public and private bodies.
What it requires
- An app that is a Data Controller subject to the QFC Regulations and processes sensitive personal data, including genetic or biometric data used to identify an individual such as a voiceprint or faceprint, must not process it unless a condition of Article 12(1) applies, such as the explicit written consent of the data subject.
- A Data Controller that cannot rely on a condition of Article 12(1) may instead obtain a permit from the QFC Data Protection Office to process the data and must apply adequate safeguards in the processing.
These lines are LexLint's reading of the law's text.
What this law does
Article 12 of the QFC Data Protection Regulations 2021 prohibits the Processing of Sensitive Personal Data unless a listed condition applies, such as the explicit written consent of the Data Subject.
The Regulations define Sensitive Personal Data as Personal Data revealing or relating to race or ethnicity, political affiliation or opinions, religious or philosophical beliefs, trade-union or organisational membership, criminal records, health or sex life, and genetic and biometric data used to identify an individual.
Article 12(2) provides that paragraph (1) does not apply if the Data Controller has obtained a permit from the Data Protection Office to Process the relevant Personal Data and applies adequate safeguards in the Processing.
When LexLint raises it
When your app profile says your app processes biometric data or processes personal data.
Back to the example · Lint your app
Page updated .