# Qatar PDPPL: Qatar Personal Data Privacy Protection Law (Law No. 13 of 2016)

> Qatar’s data protection law, one of the first in the GCC.

URL: https://securei3.com/standards/qatar-pdppl/
Category: GCC regulations: Law or regulation
Provider: Secure iQube (independent consultancy; ISO certificates are issued by accredited certification bodies; SOC and ISAE reports by licensed CPA and audit firms, which Secure iQube can arrange through partner firms)


Qatar’s Personal Data Privacy Protection Law sets principles for processing personal data, individuals’ rights, breach notification and controls for special-nature data, supported by guidelines from the competent authority.

We map personal data, implement notices and rights handling, and align with ISO 27701 so the programme is reusable across GCC laws.

## Who it is for

- Organisations processing personal data in Qatar

## Benefits

- A privacy programme consistent across the GCC

## How Secure iQube helps

1. **Applicability and scoping**: Confirm whether and how the law applies to you, entities, data, systems, roles and territories.
2. **Data and process mapping**: Build a record of processing or control inventory so obligations can be tied to real systems and owners.
3. **Gap assessment**: Measure current practice against each obligation and rank the gaps by legal and business risk.
4. **Remediation roadmap**: Policies, notices, contracts, technical controls and governance, sequenced so the highest risks close first.
5. **Evidence and ongoing monitoring**: A compliance calendar, metrics and periodic reviews so you can demonstrate compliance to a regulator or customer at any time.

## Frequently asked questions

### Does Qatar Financial Centre have separate rules?

Yes. Firms in the QFC follow the QFC data protection regulations rather than the national law.

Related: https://securei3.com/standards/iso-27701/, https://securei3.com/standards/qatar-nia/, https://securei3.com/standards/gdpr/

Contact: https://securei3.com/contact/: info@securei3.com