Qatar PDPL

Qatar Personal Data Privacy Protection Law - consent, data subject rights, sensitive data, breach notification.


Short name	QA PDPL
Region	Middle East & Africa
Country or scope	Qatar
Sector	Privacy
In your workspace	On unless you switch it off in Compliance › Manage.

How Safeguard covers QA PDPL

Scan requirements: 5, all decided by a scan.
Controls: the scan requirements below, plus 6 controls from Safeguard's control catalog for QA PDPL.
Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
Policy templates: 25: 3 written for QA PDPL and 22 from the standard set.

How each kind of coverage works, and what the readiness score counts: Compliance frameworks.

What a scan checks

Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).

Requirement	What Safeguard checks	Decided by
`QA-PDPL-SEC` Protective Precautions	Controllers must take appropriate administrative, technical and financial precautions to protect personal data against loss, damage or unauthorized disclosure; verifiable integrity of the processing software evidences such precautions (Law 13/2016, data-protection precautions obligation)	Scan
`QA-PDPL-BREACH` Breach Notification Readiness	Controllers must notify the competent department and affected individuals of breaches liable to cause serious harm; assessing a breach quickly requires known versions across the software estate (Law 13/2016, breach-notification obligation)	Scan
`QA-PDPL-PROC` Processor Compliance	Processors acting for controllers must comply with the controller's instructions and the law's protections, which requires visibility into the suppliers behind the processing software (Law 13/2016, processor-obligations provision)	Scan
`QA-PDPL-QUAL` Accuracy of Processing	Personal data must be processed accurately for legitimate purposes; the same accuracy discipline applied to the processing environment requires components with complete names and versions (Law 13/2016, lawful/accurate processing principles)	Scan
`QA-PDPL-TRANS` Transparency of Processing	Individuals are entitled to know how their data is processed and by whom; identified, timestamped documentation of the processing environment operationalizes this transparency (Law 13/2016, transparency and data subject information duties)	Scan

More controls in the catalog

The framework's Controls tab lists its scan requirements and these controls from Safeguard's control catalog. Evidence them with automated tests, uploaded evidence, policies or an attestation.

Control	Name
`QPDPL-ART11`	Data Subject Rights: Access and Correction (Art. 11-13)
`QPDPL-ART14`	Data Security Requirements (Art. 14)
`QPDPL-ART15`	Controller Obligations and Accountability (Art. 15-18)
`QPDPL-ART19`	Cross-Border Data Transfers (Art. 19)
`QPDPL-CONSENT-1`	Consent Management
`QPDPL-SENS-1`	Sensitive Data Processing Controls

Policy templates

Written for QA PDPL:

Qatar PDPL: Privacy Notice
Qatar PDPL: Data Subject Rights Procedure
Qatar PDPL: Cross-Border Data Transfer Policy

And 22 from the standard set, adapted to QA PDPL.