Act 2022
مرسوم سلطاني رقم 6/2022 بإصدار قانون حماية البيانات الشخصية (Personal Data Protection Law, Royal Decree 6/2022)
Issued by Ministry of Transport, Communications and Information Technology
Plain-English summary
Issued 9 February 2022 and published in Official Gazette 1429 on 13 February 2022. Requires explicit written consent that the controller can prove (Art. 10), gives data subjects rights to withdraw consent, correction, restriction, a copy, portability and erasure (Art. 11), requires a Ministry permit for sensitive data (Art. 5) and breach notification to the Ministry and the data subject (Art. 19). The Decree takes effect one year after gazette publication.
Who it applies to
All industries
Topics
Data Protection & Privacy
Obligations arising from this law or regulation
| Obligation | Timing | Regulator | Source | Detail |
|---|---|---|---|---|
| Consent, notice and data subject rights | — | MTCIT | source | |
Art. 10 requires the data subject's explicit written consent, which the controller must be able to prove. Art. 11 gives rights to withdraw consent, obtain a copy of data, request correction or restriction, request erasure and portability; Art. 12 provides a complaint to the Ministry. |
||||
| No obligations match these filters. | ||||
Latest news
No related news yet. We publish updates as regulators act.