The Kingdom of Bahrain enacted the Law Number 30 of 2018 i.e.
the Personal Data Protection Law (the
PDPL). Bahrain, under the PDPL, shall
establish a Personal Data Protection Authority that would enforce
this law and oversee the implementation and issues cropping out of
it.
The law is applicable to individuals located and engaged in
economic activities within the Kingdom of Bahrain as well as the
PDPL provides for the liability nexus concept that individuals and
organizations not situated in Bahrain but process or handles data
related to Bahrain or uses any route of processing data through
Bahrain.
The law follows defines the following main roles:
- data manager i.e. person with decision regarding use and means
of data processing;
