Bahrain

BH · BHR · Middle East & Africa

3 regulators · 7 laws & regulations · 5 obligations

Obligation	Timing	Regulator	Arises from	Source
All industries
Lawful basis, notice and data subject rights	Ongoing	—	Law No. (30) of 2018 with respect to Personal Data Protection Law	source
Article 4 of the Law makes the Prime Minister and ministers responsible for implementation; processing of sensitive data needs consent unless an exception applies (Art. 5). Article 17 lists the information controllers must give data subjects, and Article 18 gives the right to know whether data is processed, with a response within fifteen working days.
Personal data breach notification	Deadline Within 72 hours of discovery	—	Order No. (43) of 2022 on technical and organisational measures for personal data protection	source
Article 4 of Order No. (43) of 2022 requires controllers to notify the Authority within 72 hours of discovering a breach, unless it will not affect data subjects' rights, and to document all breaches.
Banking
Prior CBB approval for material outsourcing	Deadline At least 6 weeks before committing	CBB	Operational Risk Management Module (OM), CBB Rulebook Volume 1 (revised December 2019)	source
OM-2.3.1 requires written CBB approval before committing to a material outsourcing, requested at least six weeks ahead (OM-2.3.2(c)); non-material arrangements need notice (OM-2.1.7). Cloud outsourcing must meet the controls in OM-2.8.6 to 2.8.8.
Crypto / VDA
Stablecoin issuer licensing and reserve backing	Before issuance; reserves at all times	CBB	Stablecoin Issuance and Offering Module (SIO), CBB Rulebook Volume 6	source
SIO-1.1.3 prohibits issuing or offering stablecoins without a CBB stablecoin issuer licence. SIO-6.1.1 requires reserves of at least 100% of par value of coins in circulation at all times, segregated from the issuer's assets.
VASP licensing before offering crypto-asset services	Deadline Before offering services	CBB	—	source
CRA-1.1.1 bars regulated crypto-asset services by way of business in or from Bahrain without a CBB licence. The CBB decides applications within 60 calendar days of a complete application (CRA-1.1.18 to 1.1.21).
No obligations match these filters.