Bahrain

Requires a CBB stablecoin issuer licence to issue or offer stablecoins in or from Bahrain (SIO-1.1.3). Coins must be single-currency, backed by BHD, USD or another fiat currency the CBB has approved, with reserves of at least 100% of par value of coins in circulation held at all times (SIO-6.1.1). Issued July 2025 (SIO-A.2.1).

Issued 17 March 2022 by the Minister of Justice, Islamic Affairs and Waqf under the Personal Data Protection Law. Lists protective measures (Art. 2), requires impact assessments in specified high-risk cases (Art. 3) and breach notification to the Authority within 72 hours (Art. 4). Takes effect the day after Official Gazette publication (Art. 9).

Covers operational and technology risk, outsourcing (Chapter OM-2, including cloud services in OM-2.8.6 to 2.8.8) and business continuity (OM-4) for conventional banks. Material outsourcing needs prior written CBB approval requested at least six weeks ahead (OM-2.3.1, OM-2.3.2(c)).

Prohibits processing personal data without consent unless an exception such as contract, legal obligation or legitimate interests applies (Art. 4), sets stricter rules for sensitive data (Art. 5) and security duties (Art. 8), provides for a data protection officer (Art. 10; the CBB calls the role Data Protection Guardian) and restricts transfers abroad to adequate countries or with authorisation (Arts 12-13). Controllers must tell data subjects who they are and why they process data (Art. 17) and answer access requests within fifteen working days (Art. 18). Art. 27 creates the Personal Data Protection Authority. Signed 21 July 2018; takes effect one year after publication.

Issued 30 September 2014. Criminalises unauthorised access (Art. 2), damaging data or systems (Art. 3), interception (Art. 4), trade in hacking tools (Art. 6) and computer-related fraud (Art. 8). The Public Prosecution can order production of data and subscriber information from service providers (Art. 13) and, with a magistrate's authorisation, real-time collection of traffic and content data and blocking of content (Art. 18).

Issued 14 September 2002. Gives electronic records evidential weight (Art. 5), states that an electronic signature cannot be denied legal effect because it is electronic (Art. 6) and provides for accreditation of certification service providers by the Ministry of Commerce and Industry (Arts 16-18).

Insurance rulebook organised into High Level Standards, Business Standards, Reporting Requirements and Enforcement & Redress, with sector guides. Recent communications cover IFRS 17, outsourcing, cyber security and customer due diligence amendments (14 July 2026). The statutory basis is Part 3 (Insurance and Reinsurance) of the CBB Law.