Access Alert | Kuwait’s First Comprehensive Data Privacy Protection Regulation  

Access Alert | Kuwait’s First Comprehensive Data Privacy Protection Regulation  

Kuwait’s Communication and Information Technology Regulatory Authority (CITRA) has recently drafted Kuwait’s first comprehensive Data Privacy Protection Regulation (the Regulation). This new Regulation seeks to address an important regulatory gap in Kuwait and will apply to both public and private sector entities processing personal data of Kuwaiti citizens and domestic and overseas residents of Kuwait. Through new regulatory tools, CITRA aspires to develop a robust ICT industry that will serve as a foundation for the New Kuwait 2035 vision.

All service providers who provide communication and information technology in the State of Kuwait are therefore concerned, particularly services which rely heavily on transborder transfer of data such as public telecommunications networks, website operators, digital applications, or cloud computing services. While conducting these services, providers must comply with the following conditions: a) provide users with user-friendly access to their data policies and protections; b) maintain a clear purpose for data collection (purpose limitation) and how the data will be used; c) an obligation to legally protect the data; and d) ensure appropriate processing and encryption of personal data as per Kuwait’s Data Classification Policy (available only in Arabic).

In terms of the rights afforded to data subjects, individuals will be able to: a) withdraw consent; b) request data access, rectification and deletion; and c) receive a notification from a service provider if they intend to transfer any personal data beyond the borders of Kuwait (which will be in accordance with a Data Classification policy issued by CITRA). The outcomes of the regulatory text could have a significant impact on existing tech companies operating in the country. Therefore, early engagement with the CITRA is highly recommended at this stage.

Access Partnership is closely monitoring all developments regarding legal frameworks on the matter in the region. For more information regarding this topic, please contact Nada Ihab.

Related Articles

Harnessing AI as a Content Moderation Tool

Harnessing AI as a Content Moderation Tool

On 30 May, Access Partnership hosted a webinar on the far-reaching implications of AI-generated content and the platforms that facilitate...

30 May 2023 AI Policy Lab
Access Alert | The Rise of Autonomous Drones: A Game-Changer in Modern Warfare?

Access Alert | The Rise of Autonomous Drones: A Game-Changer in Modern Warfare?

The introduction of autonomous weapon systems, which have gained widespread use and coverage in the Ukraine War, is considered by...

30 May 2023 Opinion
Propelling Indonesia’s digital economy: How Google Play helped Indonesian app developers generate over Rp 1.5 trillion in 2022

Propelling Indonesia’s digital economy: How Google Play helped Indonesian app developers generate over Rp 1.5 trillion in 2022

With over 212 million internet users,[1] Indonesia’s digital economy has seen vigorous growth in the past decade. The country’s digital...

29 May 2023 Opinion
Access Alert | South African communications regulator frees up lower 6GHz band for Wi-Fi services

Access Alert | South African communications regulator frees up lower 6GHz band for Wi-Fi services

On 23 May, the Independent Communications Authority of South Africa (ICASA) published an amendment to Annexure B of the 2015...

26 May 2023 Opinion