QFC Data Protection Regulations 2021, supervision and penalties
QFC Data Protection Regulations 2021, Arts. 33-36
In force.
An enforcement supervision rule binding public and private bodies.
What it requires
- An app that is a Data Controller or Data Processor subject to the QFC Regulations must supply information the QFC Data Protection Office orders it to provide, and allow audits and access to premises and processing equipment.
- An infringement of any provision of the Regulations, or non-compliance with an order of the Data Protection Office, is subject to a maximum penalty of USD1,500,000.
These lines are LexLint's reading of the law's text.
What this law does
Article 33 of the QFC Data Protection Regulations 2021 gives the Data Protection Office investigative powers, including to carry out data protection audits and to obtain access to premises and data processing equipment of a Data Controller or Data Processor. Article 33(2) gives it corrective powers, including to issue reprimands, to ban Processing and to impose a penalty under Article 36.
Article 34(1) gives every Data Subject, body, organisation or association the right to lodge a complaint with the Data Protection Office about an alleged infringement. Article 36(3) subjects an infringement of any provision of the Regulations, or non-compliance with an order of the Data Protection Office, to a maximum penalty of USD1,500,000.
When LexLint raises it
When your app profile says your app processes personal data.
Back to the example · Lint your app
Page updated .