Understanding Qatar’s PDPPL: Data Rights, Compliance and AI

Send us Fan MailIn this episode of the International Data Protection Regulation Podcast, Dr. Maria Maloney and Katie Birch examine Qatar’s Personal Data Privacy Protection Law, Law No. 13 of 2016, and its growing relevance for privacy, cybersecurity, and AI governance.The discussion covers the core structure of Qatar’s privacy framework, including how personal data is defined, how sensitive data is treated, and why consent plays such a central role in lawful processing. The episode also explores the rights available to individuals, such as access, correction, objection, erasure, and withdrawal of consent, as well as the practical obligations placed on organisations that handle personal data.Maria and Katie also look at breach notification, enforcement, cross-border transfers, online privacy, direct marketing, and the higher standard applied to children’s data. They then turn to AI, considering how Qatar’s privacy framework may evolve as AI governance becomes more formalised and as global regulatory expectations continue to shift.This episode is a practical overview for privacy professionals, legal teams, compliance leaders, and anyone interested in how data protection law is developing in Qatar and across the Gulf region.Enjoyed this episode? Subscribe for more practical insights on global privacy and data protection. If you have questions about India's DPDPA, KSA & UAE's PDPL compliance, get in touch. We would love to hear from you.