Bahrain's Personal Data Protection Law (PDPL) No. 30 of 2018 — scope, obligations, data subject rights, and cross-border transfer requirements enforced by the Personal Data Protection Authority.
Ask GCC LexAI about Data Protection →Bahrain enacted the Personal Data Protection Law (Law No. 30 of 2018), one of the first comprehensive data protection laws in the GCC. It is overseen by the Personal Data Protection Authority (PDPA).
Data subjects in Bahrain have rights to access, correction, deletion, and restriction of processing of their personal data. They must be informed about data collection and can withdraw consent.
Cross-border transfers are permitted to countries with adequate data protection standards or with appropriate safeguards such as contractual clauses, unless an exemption applies.