QatarQFC Data Protection Regulations 2021, general regime
QFC Data Protection Regulations 2021, Arts. 6-10
In force.
A comprehensive regime rule binding public and private bodies.
What it requires
- An app that is a Data Controller or Data Processor incorporated or registered in the QFC must process personal data lawfully, fairly and transparently, only for specific, explicit and legitimate purposes, in amounts adequate, relevant and limited to what is necessary, and only where one of the lawful bases of Article 10(1) applies.
- A Data Controller or Data Processor outside the QFC that, as part of ongoing arrangements, processes personal data through a Data Controller or Data Processor incorporated or registered in the QFC is bound by the Regulations to the extent of that processing.
These lines are LexLint's reading of the law's text.
What this law does
The QFC Data Protection Regulations 2021 are the general personal-data regime of the Qatar Financial Centre (QFC), and the laws, rules and regulations of the State of Qatar on the matters they deal with do not apply in the QFC to the fullest extent the QFC Law permits. Article 7(1) applies them to the Processing of Personal Data by a Data Controller or Data Processor incorporated or registered in the QFC.
Article 8 sets the principles of lawfulness, fairness and transparency, specific purpose, data minimisation, accuracy and storage limitation, and Article 10(1) makes Processing lawful only if one of the listed bases applies, consent among them. Version 3 of the Regulations came into force on .
When LexLint raises it
When your app profile says your app processes personal data.
Back to the example · Lint your app
Page updated .