Data Privacy & Digital Rights

Qatar's Personal Data Privacy Protection Law (PDPPL Law 13/2016) is the first national data-privacy law in the Gulf, effective 2017. NDPO under MCIT enforces. Cybercrime Law 14/2014 Article 8 (and 2025 Article 8 bis) covers NCII and unauthorised photography.

Covered in this guide:

Qatar's Personal Data Privacy Protection Law (PDPPL — Law No. 13 of 2016) was the first national data-privacy statute in the Gulf. It took effect in 2017. The regulator is the National Data Privacy Office (NDPO) under the Ministry of Communications and Information Technology (MCIT). NDPO has been actively enforcing since 2024 — multiple compliance orders issued against ICT and e-commerce operators in 2024–2025.

For NCII and unauthorised intimate imagery, the criminal framework is the Cybercrime Prevention Law (Law No. 14 of 2014), particularly Article 8 (privacy / image-based offences — up to 3 years' imprisonment and QR 100,000 fine) and the 2025 Article 8 bis amendment on unauthorised photography. Investigation runs through MOI CID via Metrash2. Victims should also use StopNCII.org (18+) or takeitdown.ncmec.org (under-18) — both free, both work in Qatar.

Key Laws

Personal Data Privacy Protection Law (Law No. 13 of 2016, PDPPL)

Law 13/2016 — effective 2017

First Gulf national data-privacy law. Regulator: NDPO under MCIT. Active enforcement since 2024 — NDPO compliance orders against ICT and e-commerce operators in 2024–2025.

Cybercrime Prevention Law (Law No. 14 of 2014)

Law 14/2014; Law No. 11 of 2025 (gazetted 4 August 2025) added Article 8 bis

Article 8 — up to 3 years / QR 100,000 for privacy / image-based offences via electronic means. Article 8 bis (Law 11/2025) — up to 1 year imprisonment and QR 100,000 fine for unauthorised photography (taking, recording, broadcasting, or publishing photographs of others in private places without consent).

You came here to know your rights — help someone else know theirs.

Support This Mission