QatarQFC Data Protection Regulations 2021, data subject rights
QFC Data Protection Regulations 2021, Arts. 16-21
In force.
A data subject rights rule binding public and private bodies.
What it requires
- An app that is a Data Controller subject to the QFC Regulations must confirm to a data subject on request whether their personal data is processed, give them access to it and a copy, and rectify inaccurate personal data without undue delay.
- A Data Controller must erase personal data without undue delay on request in the circumstances of Article 18(2), honor objections and requests to restrict processing under Articles 19 and 20, and provide portable data in a structured, commonly used and machine-readable format under Article 21.
These lines are LexLint's reading of the law's text.
What this law does
Articles 16 to 21 of the QFC Data Protection Regulations 2021 give a Data Subject the rights of access, rectification, erasure, objection, restriction of Processing and data portability against a Data Controller. Under Article 16(3) the Data Controller must give the Data Subject a copy of the Personal Data being processed when requested. Under Article 18(1) the Data Controller must erase Personal Data without undue delay on a request in the circumstances listed in Article 18(2).
Article 21(1) gives a Data Subject the right to receive Personal Data they provided in a structured, commonly used and machine-readable format where the Processing rests on consent or a contract and is carried out by automated means.
When LexLint raises it
When your app profile says your app processes personal data.
Back to the example · Lint your app
Page updated .