Bahrain Law No. 30/2018 Issuing the Law on Personal Data Protection has entered into force on 1 August 2019.

The move towards issuing Bahrain Law No. 30/2018 was needed to align the Kingdom of Bahrain with global practices in relation to data processing and data transfer.

However, one should keep in mind that prior to the enactment of Bahrain Law No. 30/2018, personal data was in fact protected in different legislations in relation to specific sectors. This includes for example protection of personal data in financial activities as regulated by Bahrain Law No. 1/2006 The Central Bank of Bahrain and Financial Institutions Law and protection of personal data in the telecommunication sector as identified in Bahrain Edict No. 48/2002 Promulgating the Telecommunications Law.

Although Bahrain Law No. 30/2018 is currently in effect, the Personal Data Protection Authority (Authority), is yet to be established. Meanwhile, pursuant to Bahrain Edict No. 78/2019, the Ministry of Justice and Islamic Affairs will assume the duties and powers of the Authority until a decree is issued.