Material Applicability of Qatar's PDPPL

Qatar's Personal Data Protection Law (PDPPL) defines its material scope through two key factors: the Automated Means Criterion and the Personal and Domestic Use Exemption.

Relevant Legal Provisions

PDPPL Article 2:

"Provisions hereof shall apply to Personal Data when it is electronically processed, or obtained, gathered or extracted in preparation in any other way for electronic processing, or when processed via a combination of electronic and traditional processing."

"Provisions hereof shall not apply to Personal Data processed by individuals within a private or a family scope, or to any Personal Data processed for the purpose of obtaining official statistical data as per provisions of the referred to law No (2) of 2011."

Automated Means Criterion

The PDPPL applies to personal data that is:

• Electronically processed
• Obtained, gathered, or extracted for future electronic processing
• Processed through a combination of electronic and traditional methods

This criterion establishes that the law covers all forms of automated data processing, including partially automated systems that combine electronic and manual processing methods.

Personal and Domestic Use Exemption

The law explicitly excludes:

• Processing by individuals for private or family purposes
• Processing for official statistical purposes under Law No (2) of 2011

This exemption ensures that purely personal or domestic data processing activities remain outside the scope of the PDPPL's requirements.

Territorial Applicability

The law does not contain specific provisions regarding territorial applicability of the PDPPL.