Bahrain's Order No. 48 of 2022 outlines the rights of data subjects under the Personal Data Protection Law (PDPL). It details obligations for data controllers regarding automated processing, consent, and objection procedures. The order aims to ensure data subjects can exercise their rights related to their personal data effectively.
Key requirements
- Data controllers must inform data subjects of decisions based on automated processing and provide mechanisms for objection.
- Data controllers must obtain explicit consent from data subjects before processing their data, unless otherwise stipulated in the PDPL.
- Data controllers must allow data subjects to easily withdraw consent at any time, free of charge, and without responsibility.
- Data controllers must establish and publicize clear procedures for data subjects to submit objections.
Applies to: Data controllers processing personal data in Bahrain subject to the Personal Data Protection Law No. 30 of 2018.