Overview
What is PDPPL Qatar ?
The Personal Data Privacy Protection Law (PDPPL, Law 13/2016) is Qatar's personal data protection law. Supervised by the Compliance and Data Authority (CDA), it applies to any organization processing personal data in Qatar, including within the Qatar Financial Centre (QFC). The PDPPL defines data subject rights, controller obligations, and conditions for international data transfers.
Key Points
- Data subject rights: access, rectification, erasure and right to object to personal data processing
- Explicit consent required for processing, with limited legal exceptions (vital interest, contract performance)
- International transfers: permitted only to jurisdictions providing adequate level of protection
- Mandatory breach notification to competent authorities and affected data subjects
- Penalties: fines up to 1 million QAR and criminal liability for serious violations
Why Zaxyr
Zaxyr automatically maps all 72 articles of Qatar's PDPPL onto your existing controls. The platform identifies gaps with European GDPR and Saudi PDPL for multi-jurisdictional organizations, and generates processing registers compliant with CDA requirements.