QATAR Law and Practice Contributed by: Alex Saleh, Asad Ahmad, Jehan Saleh and Mounir Hany, GLA & Company
• Treat PDPPL compliance as a proactive regula - tory requirement, not a reactive one, even in the absence of public enforcement actions. • Ensure lawful bases for processing, implement appropriate security safeguards and maintain documentation of processing activities. • Establish internal mechanisms to handle data sub - ject rights and potential complaints to the compe - tent authority. • Recognise that enforcement may occur adminis - tratively, and organisations should be prepared to respond to audits, investigations or directions from the authority. Privacy and data-related litigation in Qatar remains limited and is not public. There is no publicly avail - able body of case law showing a discernible trend in privacy or data protection disputes before the courts in the past 24 months. As a result, there is no clear pattern as to claimant types, causes of action, or remedies specifically grounded in data protection or privacy breaches. While the PDPPL provides a statu - tory framework for personal data protection and con - templates sanctions for violations, reported judicial decisions applying these provisions in civil litigation are scarce, and privacy litigation can be considered to be at an early stage in the jurisdiction. 2.2 Recent Case Law There are no publicly reported court decisions in Qatar that have materially shaped a framework for privacy or data protection litigation comparable to landmark case law in other jurisdictions. In practice, the inter - pretation and application of data protection obliga - tions are primarily driven by the statutory provisions of the PDPPL and guidance issued by the competent authority, rather than by judicial precedent. Conse - quently, there are no established judicial standards equivalent to those developed through EU-level case law. 2.3 Collective Redress Mechanisms Under the PDPPL, there is no collective or representa - tive redress mechanism for privacy or data protection 2. Privacy Litigation 2.1 Privacy Litigation Overview
claims. The PDPPL provides for an individual com - plaint mechanism only, whereby an individual may file a complaint with the competent department in the event of a violation of the Law, and the competent department may investigate and issue a binding deci - sion requiring the controller or processor to rectify the breach (Article 26). The PDPPL does not contemplate group actions, representative claims or collective pro - ceedings, and there have been no legislative develop - ments introducing collective redress frameworks for data protection matters in Qatar. 3. Requirements for the Protection and Processing of Non-Personal Data 3.1 Objectives and Scope of Data Regulation Under Qatari law, there is no specific legal regime governing non-personal data akin to the EU Data Act or comprehensive cross-sector data-sharing frame - works for the Internet of Things (IoT), cloud comput - ing, big data or similar services. At present, there is no dedicated law, case law or pub - lished guidance in Qatar that establishes a cross-sec - tor non-personal data governance framework, data access sharing rights for non-personal data holders and users, or obligations similar to the EU Data Act. The available legal instruments focus on the protec - tion of personal data and related processing obliga - tions. Some policy documents such as government data management or data-sharing policies (eg, initiatives for inter-agency data exchange) exist in the public sector and envisage structured sharing of non-per - sonal data among government entities under agreed standards and conditions (eg, through a central data exchange platform), but these are policy/operational instruments rather than standalone statutory laws and do not create statutory rights analogous to EU data governance laws. Qatar has not yet enacted legislation similar to the EU Data Act, and there is no public indication of an imminent data governance law specifically for non- personal data comparable to the EU framework.
372 CHAMBERS.COM
Powered by FlippingBook