This Practice Note will provide an overview of the applicability of data protection laws in Qatar and the scope of application and exemptions relating to data protection.

• Controller: A physical or juristic person who, alone or jointly with other persons, determines the method and purpose of processing of personal data.

• Data controller: A person that, alone or jointly with others, determines the means and purpose of processing any personal data.

• Individual: A natural person whose personal data is processed.

• Legitimate purpose: The purpose for which an individual’s personal data is processed according to Qatar Law No. 13/2016 On the Protection of Personal Data Privacy.

• Minister: Minister of Transport and Communication.

• Personal data: Any information that relates to an individual whose identity is identified or can reasonably be identified, either from the data, or in combination with any other information.

• Processing: Conducting one operation or a set of operations on personal data, such as collection, reception, recording, organisation, storage, adaptation, alteration, retrieval, use, disclosure, transmission, transfer, restriction, destruction, erasure and cancellation.

• Personal data: Any information relating to an individual by which the individual can be identified or can potentially be identified.