Applicability of Qatar's Personal Data Privacy Protection Law (PDPPL)

Qatar's data protection framework is governed by specific legislation that establishes the legal foundation for personal data privacy protection within the country. The primary legislation in this domain is the Personal Data Privacy Protection Law (قانون رقم (13) لسنة 2016 بشأن حماية خصوصية البيانات الشخصية), which serves as the principal legal instrument regulating personal data privacy protection in Qatar.

The Personal Data Privacy Protection Law was adopted on November 13, 2016 and became effective on January 29, 2017. This legislation establishes the legal framework for personal data protection within Qatar's jurisdiction.

Material Applicability of Qatar's PDPPL

Qatar's Personal Data Protection Law (PDPPL) defines its material scope through two key factors: the Automated Means Criterion and the Personal and Domestic Use Exemption.

Relevant Legal Provisions

PDPPL Article 2:

"Provisions hereof shall apply to Personal Data when it is electronically processed, or obtained, gathered or extracted in preparation in any other way for electronic processing, or when processed via a combination of electronic and traditional processing."

"Provisions hereof shall not apply to Personal Data processed by individuals within a private or a family scope, or to any Personal Data processed for the purpose of obtaining official statistical data as per provisions of the referred to law No (2) of 2011."

Automated Means Criterion

The PDPPL applies to personal data that is:

• Electronically processed
• Obtained, gathered, or extracted for future electronic processing
• Processed through a combination of electronic and traditional methods

This criterion establishes that the law covers all forms of automated data processing, including partially automated systems that combine electronic and manual processing methods.

Personal and Domestic Use Exemption

The law explicitly excludes:

• Processing by individuals for private or family purposes
• Processing for official statistical purposes under Law No (2) of 2011

This exemption ensures that purely personal or domestic data processing activities remain outside the scope of the PDPPL's requirements.

Territorial Applicability

The law does not contain specific provisions regarding territorial applicability of the PDPPL.